From b79d2906aed8cd183b0c313d659f67aba41b6af9 Mon Sep 17 00:00:00 2001
From: Mark Schouten <mark@tuxis.nl>
Date: Fri, 21 Aug 2015 16:02:59 +0200
Subject: [PATCH] Rewrite sender-ip if ::ffff: is prepended because the
 syslogserver uses IPv6

---
 includes/syslog.php | 1 +
 1 file changed, 1 insertion(+)

diff --git a/includes/syslog.php b/includes/syslog.php
index 4c24270c78..7111a6be68 100644
--- a/includes/syslog.php
+++ b/includes/syslog.php
@@ -46,6 +46,7 @@ function process_syslog($entry, $update) {
         }
     }
 
+    $entry['host'] = preg_replace("/^::ffff:/", "", $entry['host']);
     $entry['device_id'] = get_cache($entry['host'], 'device_id');
     if ($entry['device_id']) {
         $os = get_cache($entry['host'], 'os');