pfBlockerNG logs
-
Hello,
I need format of pfBlockerNG-devel logs from folder /var/log/pfblockerng (dnsbl.log, ip_block.log,..).
Does anybody know where is possible to find? I searched the web and didn't find them.
Logs is almost fairly clear but I want to clarify!
Thanks in advance! -
Those are normal text files, just take a look at their contents.
-
IP Log format:
Date Timestamp,Tracker ID,Interface,Interface Name,Action,IP Version,Protocol ID,Protocol,SRC IP,DST IP,SRC Port,DST Port Direction,GeoIP,Aliasname,IP evaluated,Feed Name,Resolved Hostname,Client Hostname,ASN,Duplicate event (+/-) status
DNSBL Log format:
DNSBL type,Date Timestamp,Blocked domain,SRC IP,URL/Referer/URI/Agent String,DNSBL Block type,DNSBL Groupname,Evaluated Domain/TLD,Feedname,Duplicate event (+/-) status
-
Thanks BBcan177!
-
@BBcan177 Does the "+" mean it is a new event and "-" means it is a duplicate event? I'm assuming that is the case based on my log file but wanted to confirm.
-
@siam yes
-
X xantonin referenced this topic on
