[syslog-ng] [Bug 216] 3.4.0rc1 LLADDR parser does not work
bugzilla at bugzilla.balabit.com
bugzilla at bugzilla.balabit.com
Thu Jan 17 11:23:22 CET 2013
https://bugzilla.balabit.com/show_bug.cgi?id=216
Gergely Nagy <algernon at balabit.hu> changed:
What |Removed |Added
----------------------------------------------------------------------------
Resolution| |FIXED
Status|ASSIGNED |RESOLVED
--- Comment #5 from Gergely Nagy <algernon at balabit.hu> 2013-01-17 11:23:22 ---
(In reply to comment #0)
> IT does not matter if I use @LLADDR@, @LLADDR:mac@, @LLADDR:mac:6@ or @LLADDR::6@ I get the same results
[...]
> <patterns>
> <pattern>DHCPDISCOVER from @LLADDR:mac:6@ @QSTRING:name:()@ via @IPv4:ip@</pattern>
> </patterns>
[...]
> <test_message program="dhcpd">DHCPDISCOVER from e8:3e:b6:95:b2:38 (BLACKBERRY-27BD) via 142.104.103.253</test_message>
> <test_values>
> <test_value name="ip">142.104.103.253</test_value>
> <test_value name="mac">e8:3e:b6:95:b2:38</test_value>
> <test_value name="name">BLACKBERRY-27BD</test_value>
> </test_values>
[...]
Thanks for the examples, I finally understood how you intended to use @LLADDR@, and why the way I rewrote it when picking it for 3.4 was wrong. I've picked the
patch to 3.4, after adjusting the test cases.
--
Configure bugmail: https://bugzilla.balabit.com/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are watching all bug changes.
More information about the syslog-ng
mailing list