[fwAnalog] Cisco PIX - corrupt lines

From: Collak, Vladimir (vcollak~AT~FuelQuest.com)
Date: Tue Jun 10 2003 - 22:03:27 CEST

Next message: Collak, Vladimir: "[fwAnalog] fwanalog - Source and Destination report"
Previous message: Charlie Winckless: "[fwAnalog] [charles~AT~silvertyne.com: Cross platform analysis (OpenBSD logs on Debian)?]"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]

I have a Cisco PIX 6.0.(1). I ran the fwanalog.sh against the attached log file and received the following message:

[root~AT~vDev fwanalog-0.6.3]# ./fwanalog.sh -c ./fwanalog.opts.pix Analog found 32 corrupt lines. Please consider sending
/root/fwanalog.out/analog.err to balazs~AT~tud.at
so the author is able to fix the proble

Do you know where the problem could possibly be?

Thank you,
Vladimir

ERR *********
/software/analog-5.32/analog: analog version 5.32/Unix
C: 2003 Jun 9 16:23:10 fqppix01 %PIX-3-106010: Deny inbound TCP src outside:172.194.97.116/3399 dst dmz:124.114.249.203/80 C: * C: 2003 Jun 9 16:23:21 fqppix01 %PIX-3-106010: Deny inbound tcp src outside:63.73.29.71/2271 dst dmz:124.114.249.211/80 C: * C: 2003 Jun 9 16:23:36 fqppix01 %PIX-3-106010: Deny inbound tcp src outside:160.81.70.206/7260 dst dmz:124.114.249.229/80 C: * C: 2003 Jun 9 16:23:55 fqpix01 %PIX-3-106010: Deny inbound udp src outside:61.156.7.166/2783 dst DMZ:64.241.97.152/1434 C: *
/software/analog-5.32/analog: analog version 5.32/Unix
C: 2003 Jun 9 16:23:10 fqppix01 %PIX-3-106010: Deny inbound TCP src outside:172.194.97.116/3399 dst dmz:124.114.249.203/80 C: * C: 2003 Jun 9 16:23:21 fqppix01 %PIX-3-106010: Deny inbound tcp src outside:63.73.29.71/2271 dst dmz:124.114.249.211/80 C: * C: 2003 Jun 9 16:23:36 fqppix01 %PIX-3-106010: Deny inbound tcp src outside:160.81.70.206/7260 dst dmz:124.114.249.229/80 C: * C: 2003 Jun 9 16:23:55 fqpix01 %PIX-3-106010: Deny inbound udp src outside:61.156.7.166/2783 dst DMZ:64.241.97.152/1434 C: *
/software/analog-5.32/analog: analog version 5.32/Unix
C: 2003 Jun 9 16:23:10 fqppix01 %PIX-3-106010: Deny inbound TCP src outside:172.194.97.116/3399 dst dmz:124.114.249.203/80 C: * C: 2003 Jun 9 16:23:21 fqppix01 %PIX-3-106010: Deny inbound tcp src outside:63.73.29.71/2271 dst dmz:124.114.249.211/80 C: * C: 2003 Jun 9 16:23:36 fqppix01 %PIX-3-106010: Deny inbound tcp src outside:160.81.70.206/7260 dst dmz:124.114.249.229/80 C: * C: 2003 Jun 9 16:23:55 fqpix01 %PIX-3-106010: Deny inbound udp src outside:61.156.7.166/2783 dst DMZ:64.241.97.152/1434 C: *
/software/analog-5.32/analog: analog version 5.32/Unix
C: 2003 Jun 9 16:23:10 fqppix01 %PIX-3-106010: Deny inbound TCP src outside:172.194.97.116/3399 dst dmz:124.114.249.203/80 C: * C: 2003 Jun 9 16:23:21 fqppix01 %PIX-3-106010: Deny inbound tcp src outside:63.73.29.71/2271 dst dmz:124.114.249.211/80 C: * C: 2003 Jun 9 16:23:36 fqppix01 %PIX-3-106010: Deny inbound tcp src outside:160.81.70.206/7260 dst dmz:124.114.249.229/80 C: * C: 2003 Jun 9 16:23:55 fqpix01 %PIX-3-106010: Deny inbound udp src outside:61.156.7.166/2783 dst DMZ:64.241.97.152/1434 C: *
- LOG ****

Jun 9 16:22:46 fqppix01 %PIX-3-106010: Dlast message repeated 2 times Jun 9 16:22:59 fqppix01 %PIX-2-106001: Inbound TCP connection denied from 24.197.149.131/3259 to 124.114.249.16/445 flags SYN on interface outside Jun 9 16:23:01 fqppix01 %PIX-2-106006: Deny inbound UDP from 24.197.149.131/137 to 124.114.249.16/137 on interface outside Jun 9 16:23:02 fqppix01 %PIX-2-106001: Inbound TCP connection denied from 24.197.149.131/3259 to 124.114.249.16/445 flags SYN on interface outside Jun 9 16:23:03 fqppix01 %PIX-2-106006: Deny inbound UDP from 24.197.149.131/137 to 124.114.249.16/137 on interface outside Jun 9 16:23:03 fqppix01 %PIX-2-106006: Dlast message repeated 3 times Jun 9 16:23:08 fqppix01 %PIX-2-106001: Inbound TCP connection denied from 24.197.149.131/3259 to 124.114.249.16/445 flags SYN on interface outside Jun 9 16:23:09 fqppix01 %PIX-2-106006: Deny inbound UDP from 24.197.149.131/137 to 124.114.249.16/137 on interface outside Jun 9 16:23:10 fqppix01 %PIX-3-106010: Deny inbound TCP src outside:172.194.97.116/3399 dst dmz:124.114.249.203/80 Jun 9 16:23:10 fqppix01 %PIX-3-106010: Dlast message repeated 2 times Jun 9 16:23:21 fqppix01 %PIX-3-106010: Deny inbound tcp src outside:63.73.29.71/2271 dst dmz:124.114.249.211/80 Jun 9 16:23:21 fqppix01 %PIX-3-106010: Dlast message repeated 2 times Jun 9 16:23:36 fqppix01 %PIX-3-106010: Deny inbound tcp src outside:160.81.70.206/7260 dst dmz:124.114.249.229/80 Jun 9 16:23:36 fqppix01 %PIX-3-106010: Dlast message repeated 2 times Jun 9 16:23:55 fqpix01 %PIX-3-106010: Deny inbound udp src outside:61.156.7.166/2783 dst DMZ:64.241.97.152/1434

Next message: Collak, Vladimir: "[fwAnalog] fwanalog - Source and Destination report"
Previous message: Charlie Winckless: "[fwAnalog] [charles~AT~silvertyne.com: Cross platform analysis (OpenBSD logs on Debian)?]"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]

This archive was generated by hypermail 2.1.5 : Wed Jun 18 2003 - 20:22:03 CEST