From owner-freebsd-hackers  Tue Jun  5 11:31:35 2001
Delivered-To: freebsd-hackers@freebsd.org
Received: from sdmail0.sd.bmarts.com (sdmail0.sd.bmarts.com [209.247.77.155])
	by hub.freebsd.org (Postfix) with ESMTP id AE38F37B403
	for <hackers@FreeBSD.ORG>; Tue,  5 Jun 2001 11:31:33 -0700 (PDT)
	(envelope-from gordont@bluemtn.net)
Received: from localhost (gordont@localhost)
	by sdmail0.sd.bmarts.com (8.11.3/8.11.2/BMA1.1) with ESMTP id f55IT2f20153;
	Tue, 5 Jun 2001 11:29:03 -0700 (PDT)
Date: Tue, 5 Jun 2001 11:29:02 -0700 (PDT)
From: Gordon Tetlow <gordont@bluemtn.net>
X-X-Sender:  <gordont@sdmail0.sd.bmarts.com>
To: "Heimes, Rene" <rh@com-con.net>
Cc: <hackers@FreeBSD.ORG>
Subject: Re: security log file parser / ids
In-Reply-To: <F54B610C5BFDE546BBA2F6CC595ACC75084958@Exchange2000.com-con.ag>
Message-ID: <Pine.BSF.4.33.0106051127450.94127-100000@sdmail0.sd.bmarts.com>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
Sender: owner-freebsd-hackers@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-hackers.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo?subject=subscribe%20freebsd-hackers>
List-Unsubscribe: <mailto:majordomo?subject=unsubscribe%20freebsd-hackers>
X-Loop: FreeBSD.ORG

On Tue, 5 Jun 2001, Heimes, Rene wrote:

> hiho!
>
> i am searching for a parser that parses security logs from ipfw-made up
> logs. anyone got a hint?

No idea on that one. There might be something in the ports collection.

> (btw: what about ipfw firewalls - outdated? what would be better?
> ipchains? help!)

Um... ipchains is a Linux thing.

> other question - whats the (freeware) ids of your choice / "state of the
> art" for freeBSD?

You need to rephrase the question here.

-gordon


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-hackers" in the body of the message