diff options
| author | jim-p <jimp@pfsense.org> | 2013-08-19 13:54:22 -0400 |
|---|---|---|
| committer | jim-p <jimp@pfsense.org> | 2013-08-19 13:54:22 -0400 |
| commit | e56cb3de7d5c86e2797872ba76109e143cb27b7f (patch) | |
| tree | ddebbe00082887afbaa4afb224e0f9c3e9bb9bbd /etc/inc/filter_log.inc | |
| parent | 304161667b48e222562ab5905a0567bd3c9cff0c (diff) | |
| download | pfsense-e56cb3de7d5c86e2797872ba76109e143cb27b7f.zip pfsense-e56cb3de7d5c86e2797872ba76109e143cb27b7f.tar.gz | |
Attempt to recognize pfsync entries from pf logs.
Diffstat (limited to 'etc/inc/filter_log.inc')
| -rw-r--r-- | etc/inc/filter_log.inc | 2 |
1 files changed, 2 insertions, 0 deletions
diff --git a/etc/inc/filter_log.inc b/etc/inc/filter_log.inc index c3b52bb..09434d8 100644 --- a/etc/inc/filter_log.inc +++ b/etc/inc/filter_log.inc @@ -191,6 +191,8 @@ function parse_filter_line($line) { /* If it's still 'Options', then just ignore it. */ if ($flent['proto'] == "Options") $flent['proto'] = "none"; + } elseif (($flent['proto'] == "unknown") && (!(strpos($line, ': pfsync') === FALSE))) { + $flent['proto'] = "PFSYNC"; } /* If there is a src, a dst, and a time, then the line should be usable/good */ |
