Re: [fw-wiz] (no subject)

From: Paul D. Robertson (paul_at_compuwar.net)
Date: 03/23/04

  • Next message: Mitchell Rowton: "Re: [fw-wiz] outbound traffic security risk" 
    To: Hilal Hussein <hilalma@hotmail.com>
Date: Tue, 23 Mar 2004 08:48:56 -0500 (EST)

    On Tue, 23 Mar 2004, Hilal Hussein wrote:

    > But i have two questions concerning this syslog:
    > 1 - the log files are too big since everyfile contains the whole day logs,
    > and since the file size is about 400 + Mb, i am not able to open it. kindly,
    > is there any third party utility which i can use to manage (open, check,
    > filter, ....) the log files of the cisco syslog?

    Syslog events should be filterable by level. Also, there's probably a way
    to rotate logs in the application.

    >
    > 2 - is there any other syslog server which could work with the cisco pix
    > firewalls, and which is a service and NOT an application?

    Any syslog server will work, it's a standard protocol. I prefer
    minirsyslogd on Linux boxes.

    Paul
    -----------------------------------------------------------------------------
    Paul D. Robertson "My statements in this message are personal opinions
    paul@compuwar.net which may have no basis whatsoever in fact."
    probertson@trusecure.com Director of Risk Assessment TruSecure Corporation
    _______________________________________________
    firewall-wizards mailing list
    firewall-wizards@honor.icsalabs.com
    http://honor.icsalabs.com/mailman/listinfo/firewall-wizards

  • Next message: Mitchell Rowton: "Re: [fw-wiz] outbound traffic security risk"

    Relevant Pages

    • iptables not logging via syslog-ng
      ... in syslog.. ... # the "none" priority found in the original syslogd configuration is ... filter f_auth {facility(auth, authpriv);}; ... filter f_syslog; ...
      (Debian-User)
    • Re: iptables not logging via syslog-ng
      ... in syslog.. ... # the "none" priority found in the original syslogd configuration is ... filter f_auth {facility(auth, authpriv);}; ... filter f_syslog; ...
      (Debian-User)
    • Re: TO PAUL IBISON
      ... Sorry to peek in, but as Paul mentioned, your problem seems to be filter ... > and it would fall into the criteria to replicate to my test machine. ... >> Paul Ibison SQL Server MVP, ...
      (microsoft.public.sqlserver.replication)
    • Re: CUPS redirecting
      ... Paul W. Elsinghorst wrote: ... does someone know if there is a way to redirect pages to another printer ... What you need to do is make a new queue and specify some basic script stub as a filter..it used to be that a filter was something that got the print stream and spa it to stdout..now it doesn't have to do that..it can dump it in a file, call another print q and exit with 'done' ... Of course the user level monitoring of print queues gets a tad messy.. ...
      (comp.os.linux.misc)
    • Packet filter just wont work.
      ... Internet>PIX>2 ISA Loadbalanced with Rainwall>internal. ... am trying to have the PIX use an internal Syslog server. ... Filter Mode: Allow ... individual ISA server applying it to a static external IP, ...
      (microsoft.public.isa.configuration)