Vlog Screen Shots
Here are some screen samples of vlog in curses mode, showing
the ipfilter logfile of a SecurId server.
- raw mode
- formatted mode: with all ipmon
- formatted mode: hiding
some ipmon fields
- video modes
1. raw mode
You launch vlog, then you hit the key r
for raw mode.
You get the raw lines from /var/log/ipflog, in a scrollable window,
truncated to the terminal width.
Something like this:
2. formatted mode: with all ipmon fields
Hit r again to go back to formatted mode,
then hit o (for display options) and a
(for all fields).
With the same log lines as above, you get this screen:
- when the 'Rulenum' field (ipfilter group and rule number)
is blank, it means that this packet passed thanks to a keep state
In that case the Isba rule number is blank too.
- the name (if possible) or the port number of the service
involved is displayed between parentheses at the right.
If the packet is blocked, the service is displayed bold.
3. formatted mode: hiding some ipmon fields
To toggle individual fields displaying, use the o
key again, followed by the key of the field.
Here we successively hide the fields: microseconds, hostname, IP header length.
This is convenient for small windows: you see the informations you want:
4. video modes
Some video modes are used to bring attention to the following
- bold characters are reserved to blocked packets
- day boundary lines are underlined
- log lines vlog couldn't parse are video reversed.
Namely: log lines for fragged packets (like the fifth line here), NAT and
- when a regexp search is done, all matching substrings
are video reversed.
Here the regexp /10.0.131.175/ was searched.
- lines marked by the user (key m) are
Here the log line at 00:10:43 was marked.
Note: video attributes may be different on some
terminals (e.g. on a PC console, you see blue foreground chars instead of underlined
Vlog Home Page - last modified on
MET - Copyright (c) 2001