Security Incidents mailing list archives
Re: iptables/netfilter logs viewer/analyzer
From: Byron Sonne <blsonne () rogers com>
Date: Mon, 22 Mar 2004 23:37:32 -0500
Does anyone have any suggestions on any good log viewer or analyzer for iptables/netfilter logs. I have tried Sawmill, which is great....are there any other good ones espl. for using on Windows platform
This program does a wide variety of log formats, I've been using it with OpenBSD pf and am rather happy with the results: http://tud.at/programm/fwanalog/
From the page: "fwanalog is a shell script that parses and summarizes firewall logfiles. It currently (version 0.6.4) understands logs from ipf (tested with OpenBSD 2.8's and 2.9's ipf, also FreeBSD, NetBSD and Solaris 8 with ipf), OpenBSD 3.x pf, Linux 2.2 ipchains, Linux 2.4 iptables, some ZyXEL/NetGear routers and Cisco PIX, Watchguard Firebox and Firewall-One (not NG!) firewalls"
-- For Good, return Good. For Evil, return Justice. --------------------------------------------------------------------------- Free 30-day trial: firewall with virus/spam protection, URL filtering, VPN, wireless security Protect your network against hackers, viruses, spam and other risks with Astaro Security Linux, the comprehensive security solution that combines six applications in one software solution for ease of use and lower total cost of ownership.Download your free trial at http://www.securityfocus.com/sponsor/Astaro_incidents_040301
----------------------------------------------------------------------------
Current thread:
- Re: Incident Response Database, (continued)
- Re: Incident Response Database Jordan Wiens (Mar 17)
- Re: Incident Response Database Valdis . Kletnieks (Mar 18)
- Re: Incident Response Database Jason M. Leonard (Mar 18)
- RE: Incident Response Database Chris Krough (Mar 18)
- Re: Incident Response Database Russell Fulton (Mar 18)
- Re: Incident Response Database John Green (Mar 18)
- Re: Incident Response Database Lionel Ferette (Mar 18)
- Re: Incident Response Database Sebastian Jaenicke (Mar 18)
- Re: Incident Response Database Jason M. Leonard (Mar 18)
- iptables/netfilter logs viewer/analyzer Sabyasachi Chakrabarty (Mar 22)
- Re: iptables/netfilter logs viewer/analyzer Tony Carter (Mar 22)
- Re: iptables/netfilter logs viewer/analyzer Byron Sonne (Mar 23)
- Re: Incident Response Database wozz (Mar 18)