WELF_PROXY2DLF.IN(1)

📦 version 2.1.1, in arch rolling

💅 welf_proxy2dlf.in(1) 🎀

okay so bestie, welcome to the LogReport's Lire Documentation glow-up of welf_proxy2dlf.in(1) — yes that's the manual page name, and yes we're reading it together, grab a strawberry drink 🍓

✨ NAME ✨

welf_proxy2dlf — literally converts logs in WebTrends Enhanced Log Format into proxy DLF. that's the whole vibe. no cap 💅

🌸 SYNOPSIS 🌸

welf_proxy2dlf file

🦋 DESCRIPTION 🦋

so welf_proxy2dlf takes firewall logs that are chillin' in the WebTrends Enhanced Log Format and turns them into the proxy DLF. glow-up complete ✨

that format is officially defined at this URL, keep it safe:

http://www.netiq.com/partners/technology/welf.asp

and plot twist — this converter also supports the SonicWall extensions. she's versatile 🫶

if you wanna see a whole list of firewall products that support that format, it's right here:

http://www.netiq.com/products/fwr/compatible.asp

🔥 EXAMPLES 🔥

wanna process a log exactly like a WebTrends proxy would spit it out? say less:

$ welf_proxy2dlf < welf-proxy.log

ngl, welf_proxy2dlf is rarely gonna be the main character running on her own — most of the time she gets called up by lr_log2report, like this:

$ lr_log2report welf_proxy < /var/log/welf-proxy.log

🧚 IMPLEMENTATION NOTES 🧚

okay this part is important, lowkey. Welf log files are little gossip hubs — they contain info about many applications: proxies, packet filters, IDS. the IDS and packet filter info gets handled by the firewall superservice, while the proxy info gets handled by the proxy supersevice. everyone has their lane 💅

here's the catch, bestie: this converter will only convert records that have a proto, src and dst field. everything else? ignored. 🚫

⚠️ but heads up — those records are only ignored here. they will not be ignored by the firewall superservice. different lane, different rules, iykyk 😭

👑 SEE ALSO 👑

go read those next, they're iconic too 🫶

🌈 AUTHORS 🌈

  • Francis J. Lacoste <flacoste@logreport.org>

⭐ VERSION ⭐

$Id: welf_proxy2dlf.in,v 1.8 2006/07/23 13:16:36 vanbaal Exp $

Copyright (C) 2001 Stichting LogReport Foundation LogReport@LogReport.org

This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 2 of the License, or (at your option) any later version.

This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details.

You should have received a copy of the GNU General Public License along with this program (see COPYING); if not, check with

http://www.gnu.org/copyleft/gpl.html

and that's the whole page, bestie 🎀 tysm for reading — this was Lire 2.1.1, dated 2025-09-28, brought to you by the WELF_PROXY2DLF.IN(1) girlies. mwah 💋✨

📦 where this page comes from