NAME
fiaif-scan - print syslog entries in human readable form
SYNOPSIS
fiaif-scan [ -n ] [ -m ]
DESCRIPTION
fiaif-scan reads lines from STDIN and prints to STDOUT, in human
readable form, any packets found (standard syslog format is assumed).
Each log message is parsed based on the configuration files at the time
fiaf-scan is run. The idea is to enable the user to quickly identify
which zone rule is causing the packet to be logged, and how to change
this, if necessary.
OPTIONS
-n Don´t do a reverse lookup of IP addresses or ports; display them
as numbers. This reduces the number of host lookups and speeds
up scanning.
-m print the MAC address on each line.
EXAMPLE
fiaf-scan -n </var/log/messages
Scan from the current system log and display any packets on the
console. Don´t look up names for IP addressses or ports; just
show the numbers.
FILES
/etc/fiaif/fiaif.conf
AUTHOR
Anders Fugmann <anders(at)fugmann.net>
BUGS
The program has been tested only with messages from the standard
syslog. It may work on lines from ulogd, but this has not been tested.
Bash may not be the fastest parser in the world. Expect this software
to be slow. (40 lines per sec on a K6-II/300Mhz without name lookups).
Please report other bugs to <fiaif@fiaif.net>.
SEE ALSO
fiaif.conf(5), zone.conf(5), iptables(8), syslog(3)