RE: [logs] PIX logging

Previous message: Matt Shirilla: "RE: [logs] PIX logging"
In reply to: Marius Baicoianu: "[logs] PIX logging"
Next in thread: Brian Ford: "Re: [logs] PIX logging"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

jdellat_private

One thing you can do is use a couple of scripts. They are:

Pix2ss.pl where you can get at:
http://www.activeworx.com/downloads/index.htm

And the other is Snortsnarf where you can get at:
http://www.silicondefense.com/products/freesoftware/snortsnarf/

1st use pix2ss.pl to normalize the data and then feed your logs through
snortsnarf to get a nice webpage to view the data. Once you get this
working, you can then add a little cron script to automate the process
for you.

Jeff

> -----Original Message-----
> From: loganalysis-bouncesat_private 
> [mailto:loganalysis-bouncesat_private] On Behalf Of 
> Marius Baicoianu
> Sent: Tuesday, July 29, 2003 2:28 PM
> To: LogAnalysisat_private
> Subject: [logs] PIX logging
> 
> 
> Hi,
> 
> I have red your messages in reference with the PIX
> logging and I would like to ask you few things:
> - after you configure syslog and logrotate to log and
> rotate my system logs what do I do next?
> - do you have a easy way to review these logs? scripts
> or procedures? I'am able to have all the PIX logs on a
> syslog server, and I am able to cut them daily, but I
> don't know what I suppose to do next....How can I
> review so much info?
> 
> Please help.
> Thanks.
> 
> 
> __________________________________
> Do you Yahoo!?
> Yahoo! SiteBuilder - Free, easy-to-use web site design 
> software http://sitebuilder.yahoo.com 
> _______________________________________________
> LogAnalysis mailing list
> LogAnalysisat_private 
> http://lists.shmoo.com/mailman/listinfo/logana> lysis
> 
> 

_______________________________________________
LogAnalysis mailing list
LogAnalysisat_private
http://lists.shmoo.com/mailman/listinfo/loganalysis