[syslog-ng] IPvANY patterndb challendge

Evan Rempel erempel at uvic.ca
Fri Oct 31 21:20:40 CET 2014


I now see this in all of the specifications, but alas my legacy application is not spart enough to
deal with an IPv6 address with a port number any different than an IPv4 address with a port number.

Oh how I love the consistency of vendor logs :-)

Thanks for your time.

Evan.


On 10/31/2014 01:03 PM, Balazs Scheidler wrote:
> For the same reason the ipv6 address is enclosed in square brackets. Is that not the case?
>
> On Oct 31, 2014 4:24 PM, "Evan Rempel" <erempel at uvic.ca <mailto:erempel at uvic.ca>> wrote:
>
>     There are a number of occurrences in log lines that are of the form {address}:{port}
>
>     This is fine for IPv4 addresses 127.0.0.1:123 <http://127.0.0.1:123> which can be matched with @IPv4@:@NUMBER@
>
>     If the address is a complete IPv6 address with port 2607:f8f0:c10:fff:200:5efe:ce57:5330:123 the
>     same pattern can be used to match it @IPvAny@:@NUMBER@
>
>     If the IP address is a shortform IPv6 address such as ::ffff:127.0.0.1 and adding the port number
>     ::ffff:127.0.0.1:123 <http://127.0.0.1:123>  this fails to be matched by @IPvAny@:@NUMBER@
>
>     Has anyone else seen bumped into this issue?
>
>     For anyone taking a stab at this, this page looks interesting
>
>     http://rosettacode.org/wiki/Parse_an_IP_Address
>


More information about the syslog-ng mailing list