romanstardust
Occasional Visitor
I have an R7800 and was wondering if it would be possible to modify the script that sends out the log messages via email. It currently just dumps them like
I want to make them be split into categories like so
What would be the way to do this? I assume I need to modify some CGI code or something
Code:
[Time synchronized with NTP server] Tuesday, January 05, 2021 22:48:44
[DHCP IP: x.x.x.x] to MAC address x:x:x:x:x:x, Tuesday, January 05, 2021 22:44:08
[DHCP IP: x.x.x.x] to MAC address x:x:x:x:x:x, Tuesday, January 05, 2021 22:43:50
[DoS Attack: ACK Scan] from source: x.x.x.x, port 20025, Tuesday, January 05, 2021 22:28:17
[DoS Attack: ACK Scan] from source: x.x.x.x, port 25565, Tuesday, January 05, 2021 22:11:53
[LAN access from remote] from x.x.x.x:59222 to x.x.x.x:32400, Tuesday, January 05, 2021 22:00:34
[DoS Attack: SYN/ACK Scan] from source: x.x.x.x, port 80, Tuesday, January 05, 2021 21:50:37
[DHCP IP: x.x.x.x] to MAC address x:x:x:x:x:x, Tuesday, January 05, 2021 21:45:54
[DoS Attack: SYN/ACK Scan] from source: x.x.x.x, port 80, Tuesday, January 05, 2021 21:19:10
[DHCP IP: x.x.x.x] to MAC address x:x:x:x:x:x, Tuesday, January 05, 2021 21:01:59
[DoS Attack: ACK Scan] from source: x.x.x.x, port 5223, Tuesday, January 05, 2021 20:56:32
[DoS Attack: SYN/ACK Scan] from source: x.x.x.x, port 443, Tuesday, January 05, 2021 20:55:17
[DoS Attack: SYN/ACK Scan] from source: x.x.x.x, port 55555, Tuesday, January 05, 2021 20:34:58
[DHCP IP: x.x.x.x] to MAC address x:x:x:x:x:x, Tuesday, January 05, 2021 20:30:38
[DoS Attack: SYN/ACK Scan] from source: x.x.x.x, port 443, Tuesday, January 05, 2021 19:30:53
[DHCP IP: x.x.x.x] to MAC address x:x:x:x:x:x, Tuesday, January 05, 2021 19:27:46
I want to make them be split into categories like so
Code:
NTP
[Time synchronized with NTP server] Tuesday, January 05, 2021 22:48:44
DHCP IP
[DHCP IP: x.x.x.x] to MAC address x:x:x:x:x:x, Tuesday, January 05, 2021 22:44:08
[DHCP IP: x.x.x.x] to MAC address x:x:x:x:x:x, Tuesday, January 05, 2021 22:43:50
[DHCP IP: x.x.x.x] to MAC address x:x:x:x:x:x, Tuesday, January 05, 2021 21:45:54
[DHCP IP: x.x.x.x] to MAC address x:x:x:x:x:x, Tuesday, January 05, 2021 21:01:59
[DHCP IP: x.x.x.x] to MAC address x:x:x:x:x:x, Tuesday, January 05, 2021 20:30:38
[DHCP IP: x.x.x.x] to MAC address x:x:x:x:x:x, Tuesday, January 05, 2021 19:27:46
DoS Attack
[DoS Attack: ACK Scan] from source: x.x.x.x, port 20025, Tuesday, January 05, 2021 22:28:17
[DoS Attack: ACK Scan] from source: x.x.x.x, port 25565, Tuesday, January 05, 2021 22:11:53
[DoS Attack: SYN/ACK Scan] from source: x.x.x.x, port 80, Tuesday, January 05, 2021 21:50:37
[DoS Attack: SYN/ACK Scan] from source: x.x.x.x, port 80, Tuesday, January 05, 2021 21:19:10
[DoS Attack: ACK Scan] from source: x.x.x.x, port 5223, Tuesday, January 05, 2021 20:56:32
[DoS Attack: SYN/ACK Scan] from source: x.x.x.x, port 443, Tuesday, January 05, 2021 20:55:17
[DoS Attack: SYN/ACK Scan] from source: x.x.x.x, port 55555, Tuesday, January 05, 2021 20:34:58
[DoS Attack: SYN/ACK Scan] from source: x.x.x.x, port 443, Tuesday, January 05, 2021 19:30:53
LAN access from remote
[LAN access from remote] from x.x.x.x:59222 to x.x.x.x:xxxx, Tuesday, January 05, 2021 22:00:34
What would be the way to do this? I assume I need to modify some CGI code or something