Koozali.org: home of the SME Server

Legacy Forums => General Discussion (Legacy) => Topic started by: Andre Courchesne - Consu on January 28, 2002, 07:25:47 AM

Title: Firewall log analyser
Post by: Andre Courchesne - Consu on January 28, 2002, 07:25:47 AM

Hi all,

  I saw somewhere here a firewall analyser that would be accessible from a web page that would show actual log analysis of the firewall (thing like post scan attempts,...)

  Can someone point me to this tool?

Andre Courchesne

Title: Re: Firewall log analyser
Post by: Luke Drumm on January 29, 2002, 02:31:37 AM

Snort is probably the best beast for Packet logging (and analysis to some degree) and can be found at www.snort.org .
As for the web interface portion, the snort pages may list something of use. If you use snort to do most of the processing, a simple bit of PHP or Perl should be sufficient to display the log details.

Regards,
Luke