[Q] IPTables Log Analyzer

[Alex Satrapa]

On Sunday, June 9, 2002, at 12:01 , Rob Weir wrote:

> $ apt-cache search firewall log
> ...
> fwanalog - iptables log-file report generator (using analog)
> fwlogwatch - Firewall log analyzer
> logcheck - Mails anomalies in the system logfiles to the administrator

Another tool that can aid in checking the utilisation of your firewall 
rules is "ipac".  You can set it up to monitor particular chains, and it 
will count the traffic through those chains (at present, I just use it 
to double-check Telstra's billing).  You could use ipac to do stuff like 
checking how much traffic is being handled by particular rules, and tune 
the rules appropriately.

Alex
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 225 bytes
Desc: not available
Url : http://lists.samba.org/archive/linux/attachments/20020609/f8182936/attachment.bin