> I've not used it, but in looking for another package (!) I found fwlogwatch: > > Description: Firewall log analyzer > fwlogwatch produces ipchains, netfilter/iptables, ipfilter, Cisco IOS and > Cisco PIX log summary reports in text and HTML form and has a lot of > options to find and display relevant patterns in connection attempts. With > the data found it can also generate customizable incident reports from a > template and send them to abuse contacts at offending sites or CERT > coordination centers. Finally, it can also run as daemon and report > anomalies or start countermeasures. > > might be worth looking at? Yes, definitely. And now that I have another keyword ("firewall", duh) to search with, there are a few other options, too. Thanks... KEN -- Kenneth J. Pronovici <pronovic@ieee.org> Personal Homepage: http://www.skyjammer.com/~pronovic/ "They that can give up essential liberty to obtain a little temporary safety deserve neither liberty nor safety." - Benjamin Franklin, Historical Review of Pennsylvania, 1759
Attachment:
pgpYM7QqJ0c1d.pgp
Description: PGP signature