|
Netfilter firewalls create highly detailed logfiles that nobody really wants to inspectmanually. Logfile analysis tools like IPtables Log Analyzer,Wallfire Wflogs,and FWlogwatch help administrators keep track of developments and filter for importantmessages.
In a firewall-protected environment, the administrator must keep track of developments by logging as many transactions as possible. At the same time, admins want to avoid wading through megabytes of logfiles just because they are worried about missing a clue. Logfile Helpers Protocal analysis tools provide a solution to this dilemma. Linux users have many options for firewall analysis programs. In this article, we’ll look at three alterna-tives: IPtables Log Analyzer [1], WFlogs from the Wallfire project [2], and FWlogwatch [3]. All three programs support a wide range of protocol formats and serve up the results as neatly formatted HTML pages; WFlogs and FWlogwatch additionally have realtime modes. IPtables Log Analyzer is the only tool to use a database for message storage.
|
| Related Articles | |
|---|---|
| The Drawbridge | Implementing a bridging-level firewall |
| Setting the Table | Configuring Netfilter/iptables with Shorewall |
| Not Just for Experts | Firewalls for the everyday |
| Rikki's Open Source Exchange |
|---|
|
Stop by Rikki's Open Source Exchange for dispatches from the world of women in open source.
Rikki Kite examines the experience of women across the spectrum of open source – |
Comments