Additionally, the logging abilities of most real routers is fairly limited
and can lead to so much overhead on the CPU and memory and limited disk
space as to be pretty worthless for those devices in any long term.
Thanks,
Ron DuFresne
On Fri, 31 May 2002, Wade Blackwell wrote:
> Good morning sangeetha,
> It depends on the vendor. With Cisco ios routers can act like
> firewalls or routers and you can choose what you want to log. From the
> level of logging (0, emergencies-7, debugging) and then also
> access-lists, firewall alerts (max threshold of half open tcp conns
> ect). Cisco's pix is a different animal, it is just a firewall and will
> give you very different output as the kernel is not an ios kernel. *nix
> can be used as a firewall or a router and again you can set logging
> prameters in /etc/syslog.conf, since it is *nix the logging will be in
> the format the OS uses. All the vendors provide similar information, in
> a nutshell fw syslog will contain attempted passage or access, or many
> common attacks, routers will log nothing by default but can be
> configured to log all the same things as most firewalls. I hope that
> helps.
>
> Wade B
>
> sangeetha Rao wrote:
> >
> > Hi,
> > I'm doing a survey on deception systems.They are supposed to use only
> > firewall data. I wanted to know what is the difference between the logging
> > information stored in routers and those in a firewall. I thought firewall
> > was also a kind of router. Practiclly in what do the contents differ?, since
> > I haven't seen one.
> >
> > Thanks
> > sangeetha
> >
> > _________________________________________________________________
> > Get your FREE download of MSN Explorer at http://explorer.msn.com/intl.asp.
> >
> > _______________________________________________
> > Firewalls mailing list
> > [EMAIL PROTECTED]
> > http://lists.gnac.net/mailman/listinfo/firewalls
>
> --
> Wade Blackwell
> Washington Mutual Bank
> [EMAIL PROTECTED]
> Network Security Architect
> Aol & Yahoo instant messenger csewadeb
> Calendar http://calendar.yahoo.com/csewadeb
> (D)206.377.7426 (C)206.930.1822 (F)206.490.6797
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
"Cutting the space budget really restores my faith in humanity. It
eliminates dreams, goals, and ideals and lets us get straight to the
business of hate, debauchery, and self-annihilation." -- Johnny Hart
***testing, only testing, and damn good at it too!***
OK, so you're a Ph.D. Just don't touch anything.
_______________________________________________
Firewalls mailing list
[EMAIL PROTECTED]
For Account Management (unsubscribe, get/change password, etc) Please go to:
http://lists.gnac.net/mailman/listinfo/firewalls
