nanog mailing list archives

Re: log parsing tool?


From: "Dale W. Carder" <dwcarder () wisc edu>
Date: Mon, 22 Feb 2010 18:14:41 -0600

On Feb 22, 2010, at 4:49 PM, fedora fedora wrote:
ah, never heard of SEC before and it really looks interesting,


Take a look at SLCT, also by Risto Vaarandi:

http://ristov.users.sourceforge.net/slct/

SLCT can parse huge amounts of logs very fast.  We use it to
crunch firewall logs and also to find ports that are flapping
excessively.

Dale




Current thread: