This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

live log filtering breaks on '#' character

Remuflon over 7 years ago

For example, if I want to filter on "Packet filter rule #25", I get no results.

By trial and error I have determined that it breaks when I enter the '#' character.

This thread was automatically locked due to age.

0 sachingurung over 7 years ago

Hi Remuflon,

Can you show us a picture of failure and trials done while using # character.

Thanks

Sachin Gurung
Team Lead | Sophos Technical Support
Knowledge Base | @SophosSupport | Video tutorials
Remember to like a post. If a post (on a question thread) solves your question use the 'This helped me' link.
Cancel
Vote Up 0 Vote Down

Cancel
0 sachingurung over 7 years ago

Hi Remuflon,

Can you show us a picture of failure and trials done while using # character.

Thanks

Sachin Gurung
Team Lead | Sophos Technical Support
Knowledge Base | @SophosSupport | Video tutorials
Remember to like a post. If a post (on a question thread) solves your question use the 'This helped me' link.
Cancel
Vote Up 0 Vote Down

Cancel
0 sachingurung over 7 years ago

Hi Remuflon,

Can you show us a picture of failure and trials done while using # character.

Thanks

Sachin Gurung
Team Lead | Sophos Technical Support
Knowledge Base | @SophosSupport | Video tutorials
Remember to like a post. If a post (on a question thread) solves your question use the 'This helped me' link.
Cancel
Vote Up 0 Vote Down

Cancel
0 Remuflon over 7 years ago in reply to sachingurung

Open any log viewer, such as live log: firewall.

Enter any filter that includes a '#'. All results will stop.
Cancel
Vote Up 0 Vote Down

Cancel
0 BAlfson over 7 years ago in reply to Remuflon

[REGEX] Replace the "#" with a "." or "\#" - Any luck with that?

Cheers - Bob

Sophos UTM Community Moderator
Sophos Certified Architect - UTM
Sophos Certified Engineer - XG
Gold Solution Partner since 2005

MediaSoft, Inc. USA
Cancel
Vote Up 0 Vote Down

Cancel
0 Remuflon over 7 years ago in reply to BAlfson

No, I tried escaping it with every way I could imagine. Nothing works.

I'm kind of surprised that no one else has run into this obvious bug.
Cancel
Vote Up 0 Vote Down

Cancel
0 BAlfson over 7 years ago in reply to Remuflon

Alone among the logs, the Firewall Live Log presents abbreviated information in a format easier to read quickly. Usually, you can't troubleshoot without looking at the corresponding line from the full Firewall log file. Please post one line corresponding to one of the unblocked and blocked above.

Cheers - Bob

Sophos UTM Community Moderator
Sophos Certified Architect - UTM
Sophos Certified Engineer - XG
Gold Solution Partner since 2005

MediaSoft, Inc. USA
Cancel
Vote Up 0 Vote Down

Cancel
+1 Harro Verton over 5 years ago

Late to the party, but for whoever bumps into this thread via a search engine:

The info you see in the log log is formatted, but the filter string operates on the raw data.

The reason the "#" character doesn't work is that the character isn't used in the logs ar all. If you want to filter on packet filter rule 25, use fwrule="25" as a filter.
Cancel
Vote Up 0 Vote Down

Cancel