AWFFull

ipv6 address support

Bug #417293 reported by Benda Xu
14
This bug affects 3 people
Affects Status Importance Assigned to Milestone
AWFFull
Confirmed
Medium
Unassigned

Bug Description

I have noticed that my apache and proftpd are logging with
ipv6 address, like ::ffff:166.111.111.196 or 2001:da8::53fe:1. Awffull
will not recognize them, complaining "no regular expression matched".

e.g. a line of proftpd logged xferlog file:
Sat Aug 22 09:03:43 2009 19 ::ffff:111.167.226.206 283140 /var/ftp/newftp/TLF b _ o a IEUser@ ftp 0 * i

Revision history for this message
Steve McInerney (spm) wrote :

Thinking aloud here:
* Should be a simple addition to the complex regex used, such that it can distinguish between ip4 and ip6.
* Unsure of performance impact by doing same; so one to test.If bad; a new regex added just for ipv6 is wise.
* Also check impact on geoip lookups.

Changed in awffull:
status: New → Confirmed
importance: Undecided → Medium
Revision history for this message
Benda Xu (heroxbd) wrote :

I can see in parser.h, hostname is recognized as "([[:alnum:].]+)". For ipv6 address support just add a char ":" "([[:alnum:].]+)" -> "([[:alnum:]:.]+)".

There is no need to distinguish between ipv6 and ipv4. Besides, awffull does not distinguish between an ipv4 address and a domain name.

To post a comment you must log in.
This report contains Public information  
Everyone can see this information.
Subscribing...

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.