Re: [fwAnalog] fwanalog doesn't find messages

From: Zakai Kinan (titanyen2000~AT~yahoo.com)
Date: Thu Feb 24 2005 - 00:04:23 CET



In the packet source host report, what is the other category so big? On my report, it constitutes 95% blocking. what is the threshold under which it will not show an IP/host? I can't send the log due security restrictions.

thanks,

ZK

> Hi,
>
> * Zakai Kinan <titanyen2000~AT~yahoo.com> [2005-02-20
> 04:25]:
> > The information that fwanalog spits out is not
> intuitive. It does not
> > tell me the IP addresses that are attacking my pix
> firewall. Am I
> does it look like the sample page at
> http://tud.at/programm/fwanalog/sample-report.html ?
>
> There should be a "Blocked packet report" about the
> attacked IPs and ports
> and a list of attackers in the "Packet Source Host
> Report".
>
> If you don't get the right output, you could send me
> a part of your log in
> private e-mail and I could take a look at it.
>
> Regards
> --
>



> Balázs Bárány balazs~AT~tud.at http://tud.at
> ICQ 10747763
>
> Computers. You can't live with them, you can't live
> without them.
>
> _______________________________________________
> fwAnalog mailing list
> fwAnalog~AT~tud.at
> http://tud.at/cgi-bin/mailman/listinfo/fwanalog
>


Do You Yahoo!?
Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com

This archive was generated by hypermail 2.1.5 : Sat Feb 26 2005 - 18:02:04 CET