RE: [FW1] Firewall Log analyser

[John Horn <jhorn1@desperate.ci.tucson.az.us>]

In order for a third party program to prevent this reported problem (I've
personally never seen this issue - our log exports on Solaris are
consistent every time and well over 100MB per day) it would have to
replace the logexport command. That means Checkpoint would have to license
at least part of their code to someone. Code that is not officially
documented - like their log formats. This strikes me as very unlikely. 

On Wed, 1 Sep 1999, Michael Sleeper wrote:

> 
> PERL works great!  
> 
> Unfortunately (as some of us are discovering), the output generated by
> fw export is not always consistent.  The order of the fields appears to
> change.  I haven't taken the time to find out what triggers the output
> change, but maybe others on this list may have a bit more insight on the
> matter.
> 
> =============================
> Mike Sleeper
> System Administrator
> Information Technology
> Augusta-Richmond County Government
> http://www.co.richmond.ga.us
> =============================
> 
> -----Original Message-----
> From: John Horn [mailto:jhorn1@desperate.ci.tucson.az.us]
> Sent: Tuesday, August 31, 1999 7:16 PM
> To: Darius Basil Fan
> Cc: Checkpoint Mailing List
> Subject: Re: [FW1] Firewall Log analyser
> 
> 
> 
> On Tue, 31 Aug 1999, Darius Basil Fan wrote:
> 
> > 
> > Hi,
> > 
> > I'm looking for a 3rd party software to analyse the log file generated
> > by Checkpoint FireWall-1.
> > 
> > This software should be able to support generation of reports.
> > 
> > Does anyone in this list know of any software to do this?
> 
> Yes. Perl works extremely well.
> 
> 
> ================================================================================
>      To unsubscribe from this mailing list, please see the instructions at
>                http://www.checkpoint.com/services/mailing.html
> ================================================================================
> 



Regards:

John Horn
City of Tucson, IT Dept.
jhorn1@desperate.ci.tucson.az.us



================================================================================
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
================================================================================