Revision bbd87523
Added by Jim Pingle about 12 years ago
| etc/inc/filter_log.inc | ||
|---|---|---|
| 191 | 191 |
/* If it's still 'Options', then just ignore it. */ |
| 192 | 192 |
if ($flent['proto'] == "Options") |
| 193 | 193 |
$flent['proto'] = "none"; |
| 194 |
} elseif (($flent['proto'] == "unknown") && (!(strpos($line, ': pfsync') === FALSE))) {
|
|
| 195 |
$flent['proto'] = "PFSYNC"; |
|
| 194 | 196 |
} |
| 195 | 197 |
|
| 196 | 198 |
/* If there is a src, a dst, and a time, then the line should be usable/good */ |
Also available in: Unified diff
Attempt to recognize pfsync entries from pf logs.