FWANALOG(1)
β¨ FWANALOG(1) β¨
okay so bestie, welcome to fwanalog β the iptables log-file analyzer. this page lives in the General Commands Manual section, and it's giving "the Debian crew wrote this one for us" energy. let's get into it π
πΈ NAME πΈ
fwanalog β iptables log-file analyzer
π¦ SYNOPSIS π¦
fwanalog [-h | --help] [-c conffile][-r] [-t ] [-y] [-a IP-addr] [-p
packet]
(yes the spacing is a little feral, no we do not touch it, it's iconic as-is π)
π DESCRIPTION π
okay so real talk: this manual page documents briefly the fwanalog command. it was written for the Debian GNU/Linux distribution because the original program does not have a manual page. so this is the manual page. main character behavior, honestly π
fwanalog is a program that parses firewall log-files, and analyzes them with analog. that's the whole vibe: it reads your firewall logs and hands them off to analog so you get pretty stats instead of raw chaos.
for a complete list of supported log-files formats, go look at /usr/share/doc/fwanalog/README.Debian β that's where the full tea lives, bestie π
β¨ OPTIONS β¨
the program follows the usual GNU command line syntax, with long options starting with two dashes (`-'). a summary of options is included below. for a complete description, see the documentation in /usr/share/doc/fwanalog.
-h,--helpβ show summary of options. the classic "help me bestie" move π«Ά-c conffileβ this one shows up in the synopsis, but ngl the original options list doesn't spell out what it does, so i'm not gonna make anything up. it's aconffile. that's the fact. iykyk π-rβ rotate log cache. not necessary anymore, so lowkey it's a relic. still here though, periodt π-tβ only update statistics for today (e.g. for hourly use). thesep_hostsandsep_packetscommands infwanalog.optsare ignored when you do this. yes, ignored. we don't make the rules π-yβ like-t, but only for yesterday. time travel but make it firewall stats β-aIP-addr β create a separate report for this host. one host, one glow-up, its own report π-ppacket β create a separate report for this packet.
Format: target/protocol/portnumber
e.g. 192.168.0.1/tcp/21 or firewall/udp/137
π FILES π
/etc/fwnalog/fwanalog.optsβ user-changeable options (typo in the path is theirs, not mine, and we are keeping it exactly as written, no cap)
π AUTHOR π
this manual page was originally written by Kenneth Vestergaard Schmidt <charon@debian.org> for the Debian GNU/Linux system (but may be used by others). subsequent updates by Igor Genibel <igenibel@debian.org> and Emanuele Rocca <ema@debian.org>. legends, all three of them π
and that's the whole page, bestie π it comes to you from the General Commands Manual, under the name FWANALOG(1) β same title up top, same title down here, full circle, we love a symmetrical moment. mwah πβ¨
π¦ where this page comes from
- debian bookworm: fwanalog 0.6.9-10 Β· GPL-2.0-only
- debian trixie: fwanalog 0.6.9-11 Β· GPL-2.0-only
- ubuntu jammy: fwanalog 0.6.9-8
- ubuntu noble: fwanalog 0.6.9-10 Β· GPL-2.0-only
- ubuntu questing: fwanalog 0.6.9-11
- ubuntu resolute: fwanalog 0.6.9-12 Β· GPL-2.0-only
- ubuntu stonking: fwanalog 0.6.9-14 Β· GPL-2.0-only
- π girlified by deepseek-ai/DeepSeek-V4.1-Flash on : a language model's rewrite of the original, under its terms