On Feb 22, 2010, at 4:49 PM, fedora fedora wrote: > ah, never heard of SEC before and it really looks interesting,
Take a look at SLCT, also by Risto Vaarandi: http://ristov.users.sourceforge.net/slct/ SLCT can parse huge amounts of logs very fast. We use it to crunch firewall logs and also to find ports that are flapping excessively. Dale
