fwlogwatch
Salve a tutta la ml.
Premetto di aver cercato negli archivi e su san google ma non trovando
risposta al mio problema vi scrivo.
Ho installato fwlogwatch su un firewall . Devo ottenere dei report
giornalieri in html con tutte le connessioni entranti e uscenti dalla
rete.
Ho configurato il file fwlogwatch.config con il file di input
/var/log/iptables (dove penso siano i log del traffico).
Se dò il comando fwlogwatch ottengo quanto segue:
[root@localhost log]# fwlogwatch
Closing '/etc/fwlogwatch.config'
Opening input file '/var/log/iptables'
Processing
netfilter parse error in line 4311, ignoring.
Unrecognized token: DP
netfilter parse error in line 4439, ignoring.
Unrecognized token: kernel
Unrecognized character: :
Unrecognized token: f0
netfilter parse error in line 14540, ignoring.
Unrecognized token: DWINDOW
Unrecognized character: =
Unrecognized character: 8
Unrecognized character: 2
Unrecognized character: 1
Unrecognized character: 0
netfilter parse error in line 23272, ignoring.
Unrecognized token: DPT
Unrecognized character: =
netfilter parse error in line 23296, ignoring.
Unrecognized token: EC
Unrecognized character: =
Unrecognized character: 0
Unrecognized token: x00
Unrecognized token: DSUT
Unrecognized character: =
Unrecognized token: eth0
netfilter parse error in line 23367, ignoring.
Unrecognized token: D.216.112.112
Unrecognized character: .
Unrecognized character: 2
Unrecognized character: .
Unrecognized character: 2
Unrecognized character: .
Unrecognized character: 5
Unrecognized character: 0
Unrecognized character: 0
Unrecognized character: .
Unrecognized character: 2
Unrecognized character: .
Unrecognized character: 2
Unrecognized character: .
Unrecognized character: 5
Unrecognized character: 0
Unrecognized token: DS
Unrecognized character: =
Unrecognized character: 8
Unrecognized character: 1
Unrecognized character: 9
Unrecognized character: 2
netfilter parse error in line 24292, ignoring.
Closing '/var/log/iptables'
Sorting data
Opening output file '/firewall_log/fwout.html'
Closing '/firewall_log/fwout.html'
Exiting
Se qualcuno usa fwlogwatch e può aiutarmi gli sarei molto grato.
Grazie
Reply to: