Re: Possibility to log "Firewall stats" in a list, (kind of syslogging maybe)

Bob McConnell <[email protected]>
Newsgroups gmane.comp.security.firewalls.m0n0wall
Message-ID <[email protected]>
Jeffrey Goldberg wrote:
> 
> On Aug 15, 2009, at 12:05 PM, Wolf wrote:
> 
>> i have a question.  How can i log the "Firewall states" under 
>> "Diagnostics".
>>
>> Exists some possibilities to manage this? I want a list with all 
>> connections from
>> IPaddress-A to IPaddress-X, daily. That i can record the connections 
>> from some clients.
> 
> You may tell m0n0wall to send logging information to another machine.  
> This is under
> 
>  Diagnostics -> Logs -> Settings
> 
> And check the box for "Enable syslog'ing to remote syslog server.
> 
> That other machine be running syslog (or something that does the job of 
> syslog) and be configured to listen for syslog messages from your m0n0wall.
> 
> I have a machine on my local network that is running syslog-ng that logs 
> messages from m0n0wall (and others).  I can then use a wide variety of 
> log analysis tools on those logs.

Jeffrey,

Could you provide a list on those tools, describe how you use them and 
what they are doing for you? I have been playing with fwanalog but am 
sorely disappointed in the output. I would like to hear about other 
tools that are actually being used.

Thanks,

Bob McConnell
N2SPP
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.