fwanalog thinks all logfiles lines are corrupt

[Brian Pitts]

Binary package hint: fwanalog

I'm running ufw on UBuntu 8.04.3

fwanalog doesn't analyze anything; isntead, it reports all lines as corrupt.

analog.err is filled with lines like

C: /var/log/messages.6.gz:Dec 30 07:36:45 lime kernel: [1964806.088206] [UFW BLOCK INPUT]: IN=eth1 OUT= MAC=ff:ff:ff:ff:ff:ff:00:0d:93:70:17:32:08:00 SRC=128.192.99.215 DST=128.192.99.255 LEN=166 TOS=0x00 PREC=0x00 TTL=64 ID=9154 PROTO=UDP SPT=631 DPT=631 LEN=146
C: *

The workaround at http://ubuntuforums.org/showthread.php?t=846086 , which involves editing /bin/zgrep, seemed to solve the problem for me.

[Christian Reis (kiko)]

The better way to solve that problem is to patch fwanalog directly adding --no-filename to the zegrep invocation on line 638.