Attacks and Logs

From: Jean-Daniel Mâlet (jd.malet@wanadoo.fr)
Date: 08/02/02 

From: "Jean-Daniel Mâlet" <jd.malet@wanadoo.fr>
Date: Fri, 2 Aug 2002 15:32:29 +0200

Hi !!

Is it possible, by finely scannings the firewall's logs (or others
methods), to detect an attack that the firewall has not detected himself ?

I dont need any details, I just want to know if it's possible.

Thanks

Relevant Pages

  • Re: Ads will not go away!!!
    ... :> Any updated antivirus and patched system will not be vulnerable to ... :> attack. ... No, I dont approve of spam thats why I said to disable messenger, remeber U ... :> A firewall has nothing to do with preventing ads ...
    (microsoft.public.windowsxp.general)
  • Re: FTP server Service denial attack
    ... I did check the logs, it only happens for certain time ... Enabling Windows firewall on my server will do any good ... attack is from hijacked computers as the IP is allways ... With a decent IDS or firewall. ...
    (microsoft.public.inetserver.iis.ftp)
  • detecting a DDOS attack
    ... type of attack on our firewalls, though I've never heard of an attack ... behind the firewall, but I don't administer the firewall itself) don't ... I have been examining web server ... logs, and mail logs, and I scrutinize the output from LogWatch. ...
    (RedHat)
  • Re: Extremely odd thing with Giganews DMCA?
    ... | for Mercury mail and 9001 and 9030 for the Tor node in the Netgear router. ... I had not installed a software firewall yet. ... | Possible I could have left myself open for an attack through those ports. ... | automatically close connections on a persistent attack which the logs show it ...
    (alt.computer.security)
  • Re: Network Traffic Problem
    ... The logs pretty ... > much show that it isn't mail traffic, and our gateway router blocks all the ... > stats are showing the attack as well, so it's definitely from the outside). ... If you don't have a firewall, then you need to get one. ...
    (microsoft.public.win2000.networking)