Attempt to recognize pfsync entries from pf logs.

This commit is contained in:
jim-p 2013-08-19 13:54:22 -04:00
parent 289dd6911d
commit bbd875237a

View File

@ -191,6 +191,8 @@ function parse_filter_line($line) {
/* If it's still 'Options', then just ignore it. */
if ($flent['proto'] == "Options")
$flent['proto'] = "none";
} elseif (($flent['proto'] == "unknown") && (!(strpos($line, ': pfsync') === FALSE))) {
$flent['proto'] = "PFSYNC";
}
/* If there is a src, a dst, and a time, then the line should be usable/good */