Syslog Analyser

[rcowell]

I'm currently using Kiwi Soft's syslog program to generate daily logs of all the activity going through a PIX firewall.

Does anyone know of any programs that will analyse those logs and tally up results of for example, all the errors and warnings and display it in order of source ip address?

Thanks in advance!

[gfullage]

Nothing that I've ever heard of. You'd probably have to run your own script over the log files.

[robhorniachek]

You bet - a demo if it comes in the box with most PIXes... It's called Private I, and it's made by a company called OpenSystems. Check it out - we use it to track who's going where, and like a forensic IDS. It also does routers, VPNs, basically anything that can send a syslog message...

Check it out at www.opensystems.com