Security
Are there any good open source or freeware programs that can analyse PIX firewall logs to show basic statistics and look for unusual activity?
I know that Snort can monitor the network to look for attacks and such, but what I want is something that can look through the log file to find the same kind of stuff.
Unfortunately, we haven't found one. We actually wrote something in-house using Syslog-ng, a series of shell scripts and PHP.
If anyone knows of anything, let us all know.
by bowieb
Poster rated this answer.
by fjaramillo
We also wrote a simple inhouse tool that can search for strings. It is veru useful when filtering a particular IP or a DENY statement.
Let me know if you would like a copy. It is slow since it loads the entire file to memory. But it saves a lotof time.
Fernando
by bowieb
Poster rated this answer.
by cw
There used to be a wonderful product, called "Private Eye", that would parse Cisco PIX syslog output based on a predefined set of parameters.It spit out graphical reports that were great for management. That product is no longer available however to the best of my knowledge, but they may have changed their name.
NetForensics makes software that will parse Cisco PIX syslog output, but it's not cheap.
Good luck
Chris Weber CCDP
by bowieb
Poster rated this answer.
by bowieb
This discussion is closed to new replies.
Sort by Trending