> I've not used it, but in looking for another package (!) I found fwlogwatch:
>
> Description: Firewall log analyzer
> fwlogwatch produces ipchains, netfilter/iptables, ipfilter, Cisco IOS and
> Cisco PIX log summary reports in text and HTML form and has a lot of
> options to find and display relevant patterns in connection attempts. With
> the data found it can also generate customizable incident reports from a
> template and send them to abuse contacts at offending sites or CERT
> coordination centers. Finally, it can also run as daemon and report
> anomalies or start countermeasures.
>
> might be worth looking at?
Yes, definitely. And now that I have another keyword ("firewall", duh)
to search with, there are a few other options, too.
Thanks...
KEN
--
Kenneth J. Pronovici <pronovic@ieee.org>
Personal Homepage: http://www.skyjammer.com/~pronovic/
"They that can give up essential liberty to obtain a little
temporary safety deserve neither liberty nor safety."
- Benjamin Franklin, Historical Review of Pennsylvania, 1759
Attachment:
pgpYM7QqJ0c1d.pgp
Description: PGP signature