Firewall Log does not display logs for IGMP
I have a rule that that deals with multicast packets (to 18.104.22.168/4).
There are lines in /var/log/filter.log for packets that match that rule, but they are not displayed on the Firewall Log GUI.
It seems that IGMP protocol packets are not handled by parse_filter_line.
Updated by Phillip Davis almost 7 years ago
Note: In filter_log.inc parse_filter_line() there is also code that tries to handle protocol 112 CARP (around line 244). I suspect that the same issue (of not having a src and dst IP set) will cause any protocol 112 CARP packets in the firewall log to not display on the GUI.