Re: Cisco Pix UDP Built

2003-06-19 Thread Amodiovalerio Verde
In-Reply-To: <[EMAIL PROTECTED]> Hi Naman, nice to see you here too... unfortunally, I've to use PIX 6.0 because it seems it's the PIX version used by the FWSM module. In v6.2+ there is no more message 302005 and also no more 302001, but I have to deal also with that ones. So in the old versi

RE: Cisco Pix UDP Built

2003-06-19 Thread John Canty
ns of it's integrity, I change passwords on a weekly basis. //John -Original Message- From: Amodiovalerio Verde [mailto:[EMAIL PROTECTED] Sent: Wednesday, June 18, 2003 9:15 AM To: [EMAIL PROTECTED] Subject: Cisco Pix UDP Built Hi all, I'm writing a tool to manage and ana

Re: Cisco Pix UDP Built

2003-06-19 Thread Amodiovalerio Verde
In-Reply-To: <[EMAIL PROTECTED]> I'm not a Cisco PIX internals expert, but in TCP built (302001) I got an inbound|outbound so I can identify who start the connection. If (302005) shows only the connections FROM foreign address TO local one (as Cisco says) , how someone could identify the connec

RE: Cisco Pix UDP Built

2003-06-19 Thread James Fields
09186a00800896b2.html > > > > -Original Message- > From: Amodiovalerio Verde > To: [EMAIL PROTECTED] > Sent: 6/18/03 7:14 AM > Subject: Cisco Pix UDP Built > > > > Hi all, > > > > I'm writing a tool to manage and analyze the logs

RE: Cisco Pix UDP Built

2003-06-18 Thread Mann, Bobby
tem_messag e_guide_chapter09186a00800896b2.html -Original Message- From: Amodiovalerio Verde To: [EMAIL PROTECTED] Sent: 6/18/03 7:14 AM Subject: Cisco Pix UDP Built Hi all, I'm writing a tool to manage and analyze the logs coming from Cisco Pix and module FWSM. All the log

RE: Cisco Pix UDP Built

2003-06-18 Thread Naman Latif
-mail:y.y.y.y/22368 (z.z.z.z/22368) Regards \\ Naman > -Original Message- > From: Amodiovalerio Verde [mailto:[EMAIL PROTECTED] > Sent: Wednesday, June 18, 2003 6:15 AM > To: [EMAIL PROTECTED] > Subject: Cisco Pix UDP Built > Hi all, > I'm writing a tool to m

Cisco Pix UDP Built

2003-06-18 Thread Amodiovalerio Verde
Hi all, I'm writing a tool to manage and analyze the logs coming from Cisco Pix and module FWSM. All the logs are sent to a syslog server to collect and analyze them in realtime. I've a problem with a PIX message I couldn't understand the behaviour. The message is the %PIX|FWSM-6-302005 and