snort2dlf(1) convert Snort logs to firewall DLF




snort2dlf converts Snort logs into firewall DLF format. Input for this converter is the standard snort logfile.


To process a log as produced by snort:

 $ snort2dlf < snort.log

snort2dlf will be rarely used on its own, but is more likely called by lr_log2report:

 $ lr_log2report snort < snort.log


Torsten Fellhauer <[email protected]> . Code based upon ipchains2dlf code by Francis J. Lacoste.


$Id:,v 1.7 2006/07/23 13:16:35 vanbaal Exp $


Copyright (C) 2003 Torsten Fellhauer

This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 2 of the License, or (at your option) any later version.

This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details.

You should have received a copy of the GNU General Public License along with this program (see COPYING); if not, check with