NAME¶
welf_proxy2dlf - convert logs in WebTrends Enhanced Log Format to proxy DLF
SYNOPSIS¶
welf_proxy2dlf file
DESCRIPTION¶
welf_proxy2dlf converts firewall logs in the WebTrends Enhanced Log
Format into the proxy DLF.
That format is defined at the following URL:
http://www.netiq.com/partners/technology/welf.asp
This converter also supports the SonicWall extensions.
A list of firewall products that supports that format can be found at the
following URL:
http://www.netiq.com/products/fwr/compatible.asp
EXAMPLES¶
To process a log as produced by a WebTrends proxy:
$ welf_proxy2dlf < welf-proxy.log
welf_proxy2dlf will be rarely used on its own, but is more likely called by
lr_log2report:
$ lr_log2report welf_proxy < /var/log/welf-proxy.log
IMPLEMENTATION NOTES¶
Welf log files contains information about many applications: proxies, packet
filters, IDS. IDS and packet filters information is handled by the firewall
superservice, whereas the proxy information is handled by the proxy
supersevice.
This converter will only convert records with a proto, src and dst field. All
other records are ignored (they won't be ignored by the firewall
superservice).
SEE ALSO¶
Lire::WELF(3)
welf2dlf(1)
AUTHORS¶
Francis J. Lacoste <flacoste@logreport.org>
VERSION¶
$Id: welf_proxy2dlf.in,v 1.8 2006/07/23 13:16:36 vanbaal Exp $
COPYRIGHT¶
Copyright (C) 2001 Stichting LogReport Foundation LogReport@LogReport.org
This program is free software; you can redistribute it and/or modify it under
the terms of the GNU General Public License as published by the Free Software
Foundation; either version 2 of the License, or (at your option) any later
version.
This program is distributed in the hope that it will be useful, but WITHOUT ANY
WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR
A PARTICULAR PURPOSE. See the GNU General Public License for more details.
You should have received a copy of the GNU General Public License along with
this program (see COPYING); if not, check with
http://www.gnu.org/copyleft/gpl.html.