Firewall Wizards mailing list archives

How to analyze big Eagle logs


From: Noller2G () kochind com
Date: Fri, 21 Nov 1997 10:42:40 -0600

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

I'm looking for a solution to our logfile.xxxxxx woes...

Our logfile is quite large, and I can't figure a way to look for
things I should be worried about.

There is a pl script (see below for the first few lines) that does
a good job of sumarizing a few things, and puts the output file
into a format that I can easily import into Access for analyzing
load.  But I want something to help me interpret the logfile in a
more security concious way, not a traffic analysis way.  Is there
anything out there?

thanks...

Gregory Noller
Integration & Security Technologist
Koch Industries, Inc
(316)828-7725

PGP key ID: 0xC69F868A





#!/opt/LWperl/bin/perl
#use strict;
sub usage()
{
print STDERR <<USAGE 
perl usage.pl [-h] [-e] [-o <filename>] <inputlog >outextract
- -h    shows help message
- -e    include error messages
- -o <filename> summary file name
USAGE
;
exit;
}
# reads a Raptor Eagle logfile and generates statistics # 
j.triplett 8/96
my $PrintInvalids     = 0;
my $ftpct = 0; my $emailct = 0; my $ftpct = 0; my $smtpct = 0; my
$linect = 0; 



-----BEGIN PGP SIGNATURE-----
Version: PGP for Business Security 5.5
Comment: Koch Industries, Inc.

iQA/AwUBNHW6zYo5gTLGn4aKEQLlbQCgruyEfJlMQf3VR7ThUinV7+cDiCkAoLji
wsjDuwLyUashKLt1hS1SNMRp
=CybB
-----END PGP SIGNATURE-----



Current thread: