[RE: [[nsp] PIX log analysis]]

Metzge Chuck.Metzger at metzge.com
Fri Apr 25 15:42:07 EDT 2003


Come on...Kiwi is only $69 and for the functionality you get I think it's
well worth it.


----- Original Message -----
From: "Joshua Sahala" <joshua.ej.smith at usa.net>
To: "Shalosky, Brian K Mr CONT USAREC" <Brian.Shalosky at usarec.army.mil>;
"'Joshua Sahala'" <joshua.ej.smith at usa.net>; "jorge" <jorge at netsecure.cl>;
<cisco-nsp at puck.nether.net>
Sent: Friday, April 25, 2003 1:52 PM
Subject: Re: [RE: [[nsp] PIX log analysis]]


> kiwi was pretty easy, but all of the cool features only came in the
> pay-to-play copy :(
>
> for all of my cisco hardware, i define a facility number then point
> it at my syslog box (solaris2.6 with the standard syslog daemon).
> my syslog.conf has entries like this:
>
> local1.debug          /var/log/edge-router.log
> local3.debug          /var/log/access-switch.log
> [...]
> etc
>
> then i can chew my logs up however i choose - syslogNG and some other
> newer (and free) daemons can sort by ip/facility/severity/etc, but
> i have been to busy (lazy) to set it up.
>
> joshua
>
> "Shalosky, Brian K Mr CONT USAREC" <Brian.Shalosky at usarec.army.mil> wrote:
> >
> >
> > Do a search on the web for KIWI.  I've used it and it works pretty good.
> >
> >
> > -----Original Message-----
> > From: Joshua Sahala [mailto:joshua.ej.smith at usa.net]
> > Sent: Friday, April 25, 2003 2:06 PM
> > To: jorge; cisco-nsp at puck.nether.net
> > Subject: Re: [[nsp] PIX log analysis]
> >
> > there are various *ix syslog daemons/programs - couple that with
> > something like swatch for some log watching not requiring a warm body,
> > or if you are bored, 'tail -f mypixlog.log'
> >
> > jorge <jorge at netsecure.cl> wrote:
> > > hi:
> > >
> > > somebody knows any software type syslog, that allows to collect the
> > > registries (LOGs) of multiple PIX and can review them in real time
like
> > > for example event to viewer of the Firewal-1. it is only for seeing
the
> > > events in line, since to make reports I am used eiqnetworks.
> > >
> > > jorge
> > >
> > > _______________________________________________
> > > cisco-nsp mailing list  cisco-nsp at puck.nether.net
> > > http://puck.nether.net/mailman/listinfo/cisco-nsp
> > > archive at http://puck.nether.net/pipermail/cisco-nsp/
> >
> >
> >
> > "Walk with me through the Universe,
> >  And along the way see how all of us are Connected.
> >  Feast the eyes of your Soul,
> >  On the Love that abounds.
> >  In all places at once, seemingly endless,
> >  Like your own existence."
> >      - Stephen Hawking -
> >
> >
> > _______________________________________________
> > cisco-nsp mailing list  cisco-nsp at puck.nether.net
> > http://puck.nether.net/mailman/listinfo/cisco-nsp
> > archive at http://puck.nether.net/pipermail/cisco-nsp/
> > _______________________________________________
> > cisco-nsp mailing list  cisco-nsp at puck.nether.net
> > http://puck.nether.net/mailman/listinfo/cisco-nsp
> > archive at http://puck.nether.net/pipermail/cisco-nsp/
> >
>
>
>
> "Walk with me through the Universe,
>  And along the way see how all of us are Connected.
>  Feast the eyes of your Soul,
>  On the Love that abounds.
>  In all places at once, seemingly endless,
>  Like your own existence."
>      - Stephen Hawking -
>
>
>
> _______________________________________________
> cisco-nsp mailing list  cisco-nsp at puck.nether.net
> http://puck.nether.net/mailman/listinfo/cisco-nsp
> archive at http://puck.nether.net/pipermail/cisco-nsp/
>



More information about the cisco-nsp mailing list