
Spotlight \| Reviews \| Current Issue \| Academy \| Newsletter \| Subscribe \| Shop \|

Online

News

Features

Blogs

RSS Feeds

White Papers

Conference Videos

Departments

Resources

Current Issue

Special Editions

Spotlight

Reviews

Event Calendar

Admin Magazine

Subscribe now and save!

ADMIN - Explore the new world of system administration! ADMIN is a smart, technical magazine for IT pros on heterogeneous networks. Each issue delivers technical solutions to the real-world problems you face every day. Learn the latest techniques for better:

network security
system management
troubleshooting
performance tuning
virtualization
cloud computing

on Windows, Linux, Solaris, and popular varieties of Unix.

http://www.admin-magazine.com/

linux-magazine.com » Issues » 2005 » 50 » Firewall Logfile Analyzers

Analysis Tools for Firewall Logfiles

For the Record

Author(s): RALF SPENNEBERG

Netfilter firewalls create highly detailed logfiles that nobody really wants to inspectmanually. Logfile analysis tools like IPtables Log Analyzer,Wallfire Wflogs,and FWlogwatch help administrators keep track of developments and filter for importantmessages.

In a firewall-protected environment, the administrator must keep track of developments by logging as many transactions as possible. At the same time, admins want to avoid wading through megabytes of logfiles just because they are worried about missing a clue. Logfile Helpers Protocal analysis tools provide a solution to this dilemma. Linux users have many options for firewall analysis programs. In this article, we’ll look at three alterna-tives: IPtables Log Analyzer [1], WFlogs from the Wallfire project [2], and FWlogwatch [3]. All three programs support a wide range of protocol formats and serve up the results as neatly formatted HTML pages; WFlogs and FWlogwatch additionally have realtime modes. IPtables Log Analyzer is the only tool to use a database for message storage.

Read full article as PDF » Firewall_Logfile_Analyzers.pdf 314.56 kB

Comments

Related Articles
Bridgewall	Implementing a bridging-level firewall
Shorewall	Configuring Netfilter/iptables with Shorewall
Firewalls Intro	Firewalls for the everyday

Rikki's Open Source Exchange

Stop by Rikki's Open Source Exchange for dispatches from the world of women in open source.

Rikki Kite examines the experience of women across the spectrum of open source –
the people, projects, organizations, events, articles, issues, and news.

more...