Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 18 Jun 2004 13:33:45 +0300
From:      Giorgos Keramidas <keramida@ceid.upatras.gr>
To:        Uwe Kolsch <uwe.kolsch@wax.co.uk>
Cc:        freebsd-questions@freebsd.org
Subject:   Re: IPFW log results analysis
Message-ID:  <20040618103345.GA18531@orion.daedalusnetworks.priv>
In-Reply-To: <LMEHIFLKDJOKILNLEFHPMEJAGEAA.uwe.kolsch@wax.co.uk>
References:  <LMEHIFLKDJOKILNLEFHPMEJAGEAA.uwe.kolsch@wax.co.uk>

next in thread | previous in thread | raw e-mail | index | archive | help
On 2004-06-18 10:43, Uwe Kolsch <uwe.kolsch@wax.co.uk> wrote:
> Is there a tool for FBSD like logwatch on Linux, which can provide a detailed
> but still somehow summarized output based on the logging results of IPFW. I mean
> more detailed than this from the daily security run:
> 
> > 02010    557     48486 deny log ip from any to any out
> > 10000   1026     49716 deny ip from any to any in setup
> > 10003   3859    828227 deny ip from any to any in
> 
> ... and more like this.

You can always write your own shell scripts to parse ipfw logs ;-)

I haven't heard of any summarizing tools, but if you feel that scripting
your own is too much it shouldn't be too hard to roll a few custom
scripts if you tell me what you're looking for in such a report.

- Giorgos



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20040618103345.GA18531>