Firewall Wizards mailing list archives
How to analyze big Eagle logs
From: Noller2G () kochind com
Date: Fri, 21 Nov 1997 10:42:40 -0600
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 I'm looking for a solution to our logfile.xxxxxx woes... Our logfile is quite large, and I can't figure a way to look for things I should be worried about. There is a pl script (see below for the first few lines) that does a good job of sumarizing a few things, and puts the output file into a format that I can easily import into Access for analyzing load. But I want something to help me interpret the logfile in a more security concious way, not a traffic analysis way. Is there anything out there? thanks... Gregory Noller Integration & Security Technologist Koch Industries, Inc (316)828-7725 PGP key ID: 0xC69F868A #!/opt/LWperl/bin/perl #use strict; sub usage() { print STDERR <<USAGE perl usage.pl [-h] [-e] [-o <filename>] <inputlog >outextract - -h shows help message - -e include error messages - -o <filename> summary file name USAGE ; exit; } # reads a Raptor Eagle logfile and generates statistics # j.triplett 8/96 my $PrintInvalids = 0; my $ftpct = 0; my $emailct = 0; my $ftpct = 0; my $smtpct = 0; my $linect = 0; -----BEGIN PGP SIGNATURE----- Version: PGP for Business Security 5.5 Comment: Koch Industries, Inc. iQA/AwUBNHW6zYo5gTLGn4aKEQLlbQCgruyEfJlMQf3VR7ThUinV7+cDiCkAoLji wsjDuwLyUashKLt1hS1SNMRp =CybB -----END PGP SIGNATURE-----
Current thread:
- How to analyze big Eagle logs Noller2G (Nov 21)