FWANALOG(1)

✨ FWANALOG(1) ✨

okay so bestie, welcome to fwanalog β€” the iptables log-file analyzer. this page lives in the General Commands Manual section, and it's giving "the Debian crew wrote this one for us" energy. let's get into it πŸ’…


🌸 NAME 🌸

fwanalog β€” iptables log-file analyzer


πŸ¦‹ SYNOPSIS πŸ¦‹

fwanalog [-h | --help] [-c conffile][-r] [-t ] [-y] [-a IP-addr] [-p
packet]

(yes the spacing is a little feral, no we do not touch it, it's iconic as-is πŸŽ€)


πŸ’– DESCRIPTION πŸ’–

okay so real talk: this manual page documents briefly the fwanalog command. it was written for the Debian GNU/Linux distribution because the original program does not have a manual page. so this is the manual page. main character behavior, honestly πŸ‘‘

fwanalog is a program that parses firewall log-files, and analyzes them with analog. that's the whole vibe: it reads your firewall logs and hands them off to analog so you get pretty stats instead of raw chaos.

for a complete list of supported log-files formats, go look at /usr/share/doc/fwanalog/README.Debian β€” that's where the full tea lives, bestie πŸ“


✨ OPTIONS ✨

the program follows the usual GNU command line syntax, with long options starting with two dashes (`-'). a summary of options is included below. for a complete description, see the documentation in /usr/share/doc/fwanalog.

  • -h, --help β€” show summary of options. the classic "help me bestie" move 🫢
  • -c conffile β€” this one shows up in the synopsis, but ngl the original options list doesn't spell out what it does, so i'm not gonna make anything up. it's a conffile. that's the fact. iykyk πŸŽ€
  • -r β€” rotate log cache. not necessary anymore, so lowkey it's a relic. still here though, periodt πŸ’€
  • -t β€” only update statistics for today (e.g. for hourly use). the sep_hosts and sep_packets commands in fwanalog.opts are ignored when you do this. yes, ignored. we don't make the rules πŸ™ˆ
  • -y β€” like -t, but only for yesterday. time travel but make it firewall stats ⭐
  • -a IP-addr β€” create a separate report for this host. one host, one glow-up, its own report πŸ’…
  • -p packet β€” create a separate report for this packet.

Format: target/protocol/portnumber

e.g. 192.168.0.1/tcp/21 or firewall/udp/137


πŸŽ€ FILES πŸŽ€

  • /etc/fwnalog/fwanalog.opts β€” user-changeable options (typo in the path is theirs, not mine, and we are keeping it exactly as written, no cap)

πŸ‘‘ AUTHOR πŸ‘‘

this manual page was originally written by Kenneth Vestergaard Schmidt <charon@debian.org> for the Debian GNU/Linux system (but may be used by others). subsequent updates by Igor Genibel <igenibel@debian.org> and Emanuele Rocca <ema@debian.org>. legends, all three of them 🌈


and that's the whole page, bestie πŸ’œ it comes to you from the General Commands Manual, under the name FWANALOG(1) β€” same title up top, same title down here, full circle, we love a symmetrical moment. mwah πŸŽ€βœ¨