Security Basics mailing list archives

Re: Tools to Analyse Logs in Checkpoint NG


From: "Dr. S. A. Vetha Manickam" <avmanickam () yahoo com>
Date: Wed, 21 May 2003 10:32:26 -0700 (PDT)

Hi,
Why don't you look at fwplat (http://fwplat.sourceforge.net), which seems to be very good
tool for analysisng the logs Checkpoint firewall


--- E P <enda.purcell () cw com> wrote:


Hi all,
 
I am wondering if anybody has or have come across any scripting tools 
or good freeware package that can be used to analyse Checkpoint NG 
Firewall Log files. I'm faced  with the task that I have several 
firewalls 
that I wish to produce reports on things like attack info from 
Smartdefence, attacks, usage, top talkers and all that fancy stuff. 
Hopefully 
someone may have come across something that could be used or easily 
modified to perform this rather than having to write my own scripts. I 
have 
looked in brief at WebTrends and I don't feel that it is granular 
enough for what I want
 
thanks

---------------------------------------------------------------------------
Thinking About Security Training? You Can't Afford Not To!

Vigilar's industry leading curriculum includes:  Security +, Check Point, 
Hacking & Assessment, Cisco Security, Wireless Security & more! Register Now!
--UP TO 30% off classes in select cities-- 
http://www.securityfocus.com/Vigilar-security-basics
----------------------------------------------------------------------------



=====


__________________________________
Do you Yahoo!?
The New Yahoo! Search - Faster. Easier. Bingo.
http://search.yahoo.com

---------------------------------------------------------------------------
Thinking About Security Training? You Can't Afford Not To!

Vigilar's industry leading curriculum includes:  Security +, Check Point, 
Hacking & Assessment, Cisco Security, Wireless Security & more! Register Now!
--UP TO 30% off classes in select cities-- 
http://www.securityfocus.com/Vigilar-security-basics
----------------------------------------------------------------------------


Current thread: