Re: Cisco ASA log parser

The main format difference between Pix logs and ASA logs is just this: 
Pix logs have codes like %PIX-6-123456 while ASA ones have... 
%ASA-6-123456. So you can modify an existing Pix parser to analyze ASA 
logs by just replacing PIX with ASA in the code that is parsing the 
actual log entries. While there might be some extra types of log entries 
for ASA, many of them are common.

Do you need an open source due to limited funding or are there other 
constrains? While not open source, our log analyzer FireGen 
(www.firegen.com) is offered as a free NFR license to CISSPs, CISAs and 
others and maybe you qualify.

Regards,

Adrian Grigorof
Altair Technologies Ltd.
www.altairtech.ca



Tomas Olsson wrote:
> Hi,
>
> I need an open source log parser for the Cisco ASA firewall. Is there 
> any available or is it possible to use a modified parser for PIX? I 
> know that Sawmill can parse ASA but it is not open source.
>
> Regards
> Tomas Olsson
> http://www.sics.se/~tol
> _______________________________________________
> LogAnalysis mailing list
> [email protected]
> http://www.loganalysis.org/mailman/listinfo/loganalysis
>
>
>

_______________________________________________
LogAnalysis mailing list
[email protected]
http://www.loganalysis.org/mailman/listinfo/loganalysis