diff options
author | Scott Ullrich <sullrich@pfsense.org> | 2006-02-06 01:30:15 +0000 |
---|---|---|
committer | Scott Ullrich <sullrich@pfsense.org> | 2006-02-06 01:30:15 +0000 |
commit | 093c4c13735136da12311f671e7ed3868cb5e5d1 (patch) | |
tree | cc561e99516e0659fc5b5428b25e97fc1f3f0821 /usr/local/www | |
parent | b4c3b8a01c4be46d2ca793028797ff335ded9db6 (diff) | |
download | pfsense-093c4c13735136da12311f671e7ed3868cb5e5d1.zip pfsense-093c4c13735136da12311f671e7ed3868cb5e5d1.tar.gz |
Update REGEX to match -v behavior
Diffstat (limited to 'usr/local/www')
-rwxr-xr-x | usr/local/www/diag_logs_filter_dynamic.php | 66 |
1 files changed, 31 insertions, 35 deletions
diff --git a/usr/local/www/diag_logs_filter_dynamic.php b/usr/local/www/diag_logs_filter_dynamic.php index 7ad59c9..55d1c03 100755 --- a/usr/local/www/diag_logs_filter_dynamic.php +++ b/usr/local/www/diag_logs_filter_dynamic.php @@ -69,63 +69,59 @@ function conv_clog($logfile, $tail = 50) { foreach ($logarr as $logent) { - $log_split = ""; + if($counter > $nentries) + break; - /* pf: 6. 272592 rule 218/0(match): block in on fxp0: X.XXX.XXX.XXX.4503 > XX.X.XXX.X.6881: S 1163549441:1163549441(0) win 65535 <mss 1432,nop,nop,sackOK> */ + $log_split = ""; - preg_match("/(.*)\s(.*)\spf:.*rule (.*)\(match\):\s(\w+)\sin\son\s(\w+:)\s([0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,7})\s([\<|\>])\s([0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,7}):.*/",$logent,$log_split); - - if($log_split[5] == "") - preg_match("/(.*)\s(.*)\spf:.*rule (.*)\(match\):\s(\w+)\sin\son\s(\w+:)\s([0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3})\s([\<|\>])\s([0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}):.*/",$logent,$log_split); - + preg_match("/(.*)\s.*\spf:\s.*\srule\s(.*)\(match\)\:\s(.*)\s\w+\son\s(\w+)\:\s(.*)\s>\s(.*)\:\s.*/", $logent, $log_split); + $logent = strtoupper($logent); $do_not_display = false; - if(stristr($logent, "UDP") == true) + + if(stristr(strtoupper($logent), "UDP") == true) $flent['proto'] = "UDP"; - else if(stristr($logent, "TCP") == true) + else if(stristr(strtoupper($logent), "TCP") == true) $flent['proto'] = "TCP"; - else if(stristr($logent, "ICMP") == true) + else if(stristr(strtoupper($logent), "ICMP") == true) $flent['proto'] = "ICMP"; - else if(stristr($logent, "HSRP") == true) + else if(stristr(strtoupper($logent), "HSRP") == true) $flent['proto'] = "HSRP"; - else if(stristr($logent, "ESP") == true) + else if(stristr(strtoupper($logent), "ESP") == true) $flent['proto'] = "ESP"; - else if(stristr($logent, "AH") == true) + else if(stristr(strtoupper($logent), "AH") == true) $flent['proto'] = "AH"; - else if(stristr($logent, "GRE") == true) + else if(stristr(strtoupper($logent), "GRE") == true) $flent['proto'] = "GRE"; - else if(stristr($logent, "IGMP") == true) + else if(stristr(strtoupper($logent), "IGMP") == true) $flent['proto'] = "IGMP"; - else if(stristr($logent, "CARP") == true) + else if(stristr(strtoupper($logent), "CARP") == true) $flent['proto'] = "CARP"; - else if(stristr($logent, "PFSYNC") == true) + else if(stristr(strtoupper($logent), "PFSYNC") == true) $flent['proto'] = "PFSYNC"; else $do_not_display = true; - + $flent['time'] = $log_split[1]; - $flent['act'] = $log_split[4]; - $flent['interface'] = strtoupper(convert_real_interface_to_friendly_interface_name(str_replace(":","",$log_split[5]))); + $flent['act'] = $log_split[3]; - if($flent['proto'] == "TCP" or $flent['proto'] == "UDP") { - $flent['src'] = convert_port_period_to_colon($log_split[6]); - $flent['dst'] = convert_port_period_to_colon($log_split[8]); - } else { - $flent['src'] = $log_split[6]; - $flent['dst'] = $log_split[8]; - } + $friendly_int = convert_real_interface_to_friendly_interface_name($log_split[4]); - $tmp = split("/", $log_split[3]); - $flent['rulenum'] = $tmp[0]; + $flent['interface'] = strtoupper($friendly_int); - if($flent['src'] == "" or $flent['dst'] == "" or $do_not_display == true) { - /* do not display me! */ - } else { - $counter++; - $filterlog[] = $flent; - } + if($config['interfaces'][$friendly_int]['descr'] <> "") + $flent['interface'] = "{$config['interfaces'][$friendly_int]['descr']}"; + + $flent['src'] = convert_port_period_to_colon($log_split[5]); + $flent['dst'] = convert_port_period_to_colon($log_split[6]); + + $tmp = split("/", $log_split[2]); + $flent['rulenum'] = $tmp[0]; + $counter++; + $filterlog[] = $flent; + } return $filterlog; |