Re: iptables log analysis tools

2003-02-24 Thread Chris Travers
Skip Morrow wrote: ACID is great for analyzing snort logs. Are there any good software packages with that kind of power and flexibility for iptables logs? I think one place to start would be to find a way to have iptables log to a mysql database (like snort does). There are several tools--

Re: iptables log analysis tools

2003-02-24 Thread Yvan Laverdiere
Hi, Have a look at this page : http://gege.org/iptables/doc/faq.html Hope this helps... Yvan - Original Message - From: "Skip Morrow" <[EMAIL PROTECTED]> To: "Security-Basics" <[EMAIL PROTECTED]> Sent: Sunday, February 23, 2003 12:26 PM Subject: iptab

iptables log analysis tools

2003-02-24 Thread Skip Morrow
ACID is great for analyzing snort logs. Are there any good software packages with that kind of power and flexibility for iptables logs? I think one place to start would be to find a way to have iptables log to a mysql database (like snort does). -- Skip Morrow, [EMAIL PROTECTED] on 02/23/2003

Re: RE : Log Analysis

2002-12-04 Thread KoRe MeLtDoWn
ED]> To: "'Niall O Malley (LMI)'" <[EMAIL PROTECTED]>,<[EMAIL PROTECTED]> Subject: RE : Log Analysis Date: Tue, 3 Dec 2002 08:05:25 +0100 MIME-Version: 1.0 Received: from outgoing.securityfocus.com ([205.206.231.26]) by mc4-f21.law16.hotmail.com with Microsoft SM

RE: Log Analysis

2002-12-04 Thread Mark Palmer, CCNA
. Mark Palmer, Director for ITS Concordia University @ Austin -Original Message- From: Panth3r [mailto:[EMAIL PROTECTED]] Sent: Monday, December 02, 2002 5:39 PM To: [EMAIL PROTECTED] Subject: RE: Log Analysis Not sure about windows, but there are alot of tools like that available for Unix

RE: Log Analysis

2002-12-04 Thread Wollenslegel, Troy (T.A.)
02, 2002 6:39 PM To: [EMAIL PROTECTED] Subject: RE: Log Analysis Not sure about windows, but there are alot of tools like that available for Unix/Linux Webalizer will show you traffic to and from sites (plus alot more info) on a graph and plain text. If you mean 'sites' as in what co

Re: Log Analysis

2002-12-03 Thread Mattias Hedenskog
Hi.. Well that just depends on what service you're refering to? There is a bunch of them out there. Personally I prefer ACID(http://acidlab.sourceforge.net) for Snort and Fireparse(http://aaron.marasco.com/linux.html) for Iptables. The best way to find out yourself is to look at http://www.fre

Re: Log Analysis

2002-12-03 Thread Jim Geovedi
> Are any of you aware of a tool that will allow an administrator to analyse > log files and produce statistics based on the log content. I want to see > what sites have been accessed, how many times etc. > > I want something preferably in real time with a gui/html interface. If it > was freewa

RE: Log Analysis

2002-12-03 Thread Panth3r
From: Niall O Malley (LMI) [mailto:[EMAIL PROTECTED]] Sent: Monday, December 02, 2002 2:49 AM To: [EMAIL PROTECTED] Subject: Log Analysis Hi, Are any of you aware of a tool that will allow an administrator to analyse log files and produce statistics based on the log content. I want to see what s

Re: Log Analysis

2002-12-03 Thread Jason Dixon
On Mon, 2002-12-02 at 03:48, Niall O Malley (LMI) wrote: > Hi, > > Are any of you aware of a tool that will allow an administrator to analyse log files >and produce statistics based on the log content. I want to see what sites have been >accessed, how many times etc. Perl. Next time, if you'

RE : Log Analysis

2002-12-03 Thread Nicolas Villatte
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Webtrends, NEtIQ will do that for you on Wintel platforms. - -Message d'origine- De : Niall O Malley (LMI) [mailto:[EMAIL PROTECTED]] Envoyé : lundi 2 décembre 2002 9:49 À : [EMAIL PROTECTED] Objet : Log Analysis Hi, Are any o

Log Analysis

2002-12-02 Thread Niall O Malley (LMI)
Hi, Are any of you aware of a tool that will allow an administrator to analyse log files and produce statistics based on the log content. I want to see what sites have been accessed, how many times etc. I want something preferably in real time with a gui/html interface. If it was freeware/o

Log Analysis of an ACE Server (SecurID Cards)

2002-03-16 Thread Arnaud . Colineau
Hi, we are currently using RSA SecurID authenticators (RSA SecurID Tokens - RSA ACE 5.0) to securely access VPN, Remote Access applications and Web servers. This ACE server generates a lot of logs. Has anyone experience with some analysis tools (Web Based) which allow on-line analysis of ACE

Re: Log Analysis

2002-03-04 Thread Krishna
-BEGIN PGP SIGNED MESSAGE- Hash: MD5 Hello Nick, Thursday, February 28, 2002, 1:48:45 AM, you wrote: NP> Hi, NP> I am looking for a good log analyzer (syslog). I have NP> looked at Private I but do not like the idea of a NP> proprietary database containg the info. I prefer a N

Log Analysis

2002-02-28 Thread Nick Patellis
Hi, I am looking for a good log analyzer (syslog). I have looked at Private I but do not like the idea of a proprietary database containg the info. I prefer a standard SQL database to contain the traffic info. Thanks Dude