Re: [fwAnalog] Destination Port?
From: Balázs Bárány (balazs~AT~tud.at)
Date: Mon Aug 13 2001 - 20:44:18 CEST
- Chris Ruvolo <chris~AT~ruvolo.org> [2001-08-13 20:13]:
> what proportion of the blocked packets are for what port. That is, it
> sorts on and is divided up by IP, not port. Note that the pie chart is
I've found that this is enough information. Most of the time, the port
breakdown is about the same for all IP addresses in my (small) networks. So
if you look at the most scanned host, you see which ports are scanned most.
The problem is that Analog has a concept of what makes sense in a URL report
and fwanalog stretches it already quite to the extreme.
That said, you could try to replace $9 with $11 in the long ipchains regexp
and it would probably work.
Balázs Bárány balazs~AT~tud.at http://tud.at ICQ 10747763
Computers. You can't live with them, you can't live without them.
This archive was generated by hypermail 2.1.3
: Mon Jul 29 2002 - 22:22:05 CEST