Ciao Crist,
this is one line from the debug.log file:
[EMAIL PROTECTED] more debug.log
9May2007 9:55:52 accept 194.119.212.2 >eth4 useralert product: VPN-1 &
FireWall-1; src: 10.10.2.230; s_port: 58011; dst: 194.119.212.15; service:
ssh; proto: tcp; xlatesrc: 194
.119.212.58; xlatedst: 172.30.1.15; NAT_rulenum: 14; NAT_addtnl_rulenum: 25;
rule: 22;
Any idea?
Giacomo
----- Original Message -----
From: "Crist Clark" <[EMAIL PROTECTED]>
To: <[email protected]>
Sent: Tuesday, May 08, 2007 6:33 PM
Subject: Re: [FW-1] read input from fw1
On 5/8/2007 at 1:36 AM, Giacomo Fazio <[EMAIL PROTECTED]>
wrote:
I would like to use the scanalert.pl script.
But it do not read the source, destination,etc from the output of
fw1.
Is this line of the perl script correct ?
$message = <STDIN>;
Yes.
After that line try a,
open(DEBUG, ">>debug.log");
print DEBUG "$message";
To see exactly what the script is receiving.
B¼information contained in this e-mail message is confidential, intended
only for the use of the individual or entity named above. If the reader
of this e-mail is not the intended recipient, or the employee or agent
responsible to deliver it to the intended recipient, you are hereby
notified that any review, dissemination, distribution or copying of this
communication is strictly prohibited. If you have received this e-mail
in error, please contact [EMAIL PROTECTED]
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to [EMAIL PROTECTED]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[EMAIL PROTECTED]
=================================================
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to [EMAIL PROTECTED]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[EMAIL PROTECTED]
=================================================
