Re: [fwAnalog] Cisco PIX 6.3(1) logging to Webtrends syslog server

From: Balázs Bárány (balazs~AT~tud.at)
Date: Sat May 01 2004 - 12:22:23 CEST

• Next message: Emanuele Rocca: "[fwAnalog] new fwanalog version available in Debian sid"
• Previous message: bb: "[fwAnalog] Cisco PIX 6.3(1) logging to Webtrends syslog server"
• In reply to: bb: "[fwAnalog] Cisco PIX 6.3(1) logging to Webtrends syslog server"
• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]

Hello,

• bb <bollazz~AT~gmx.co.uk> [2004-05-01 00:41]:
  > 1. Whether this version 0.6.4 supports CISCO PIX 6.3 ?
  The PIX part of your log line looks OK.

> 2. Whether fwanalog parses Webtrends syslogs.
No. Fwanalog supports only Unix syslog. You need to preprocess your logs to look like syslog. It shouldn't be too hard but it's a bit messy because Unix syslog writes the month with 3 letters instead of numerically.

Maybe at some time in the future, I'll split the parsing in fwanalog into two stages: log software format and firewall software format.

Regards

-- 
_________________________________________________________________________
Balázs Bárány       balazs~AT~tud.at        http://tud.at       ICQ 10747763

A good engineer will make considerable effort to avoid additional effort.

• Next message: Emanuele Rocca: "[fwAnalog] new fwanalog version available in Debian sid"
• Previous message: bb: "[fwAnalog] Cisco PIX 6.3(1) logging to Webtrends syslog server"
• In reply to: bb: "[fwAnalog] Cisco PIX 6.3(1) logging to Webtrends syslog server"
• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]

This archive was generated by hypermail 2.1.5 : Mon May 03 2004 - 10:22:04 CEST