Skip to contentSkip to conversation

Weblogger

DISCUSSION Bruno Cochofel 5 participants 5 messages Oct 1, 2005

lore
Share & tools
lore
#0 lore raw

Ok, this is my first post to this list and I'm new to using netfilter. First, I'm using netfilter using Suse Firewall.
What I really want is a weblogger, or some GUI program to analyse logs generated by the firewall.
Can someone point me one?

Thanks,
Bruno Cochofel

#1 lore raw
Quoted 5 lines · Bruno Cochofel

Ok, this is my first post to this list and I'm new to using netfilter. First, I'm using netfilter using Suse Firewall.
What I really want is a weblogger, or some GUI program to analyse logs generated by the firewall.
Can someone point me one?

Hi,

try http://www.gege.org/iptables/

Cheers,

Signature · 2 lines
Gerald Holl
http://holl.co.at
#3 lore raw
In reply to Bruno Cochofel
Quoted 2 lines

Ok, this is my first post to this list and I'm new to using netfilter.

First, I'm using

Quoted 1 line

netfilter using Suse Firewall. What I really want is a weblogger, or some

GUI program to

Quoted 1 line

analyse logs generated by the firewall. Can someone point me one?

You can take a look at http://www.webfwlog.net

-Bob

#2 lore raw
In reply to Gerald Holl
Quoted 8 lines · Gerald Holl
Quoted 5 lines · Bruno Cochofel

Ok, this is my first post to this list and I'm new to using netfilter. First, I'm using netfilter using Suse Firewall. What I really want is a weblogger, or some GUI program to analyse logs generated by the firewall.
Can someone point me one?

try http://www.gege.org/iptables/

Quoted 1 line · Bob

You can take a look at http://www.webfwlog.net

I looked briefly at each. I think Webfwlog has a superior design, because it uses ULOG to populate the database. Gege's unnamed daemon reads log files from syslog, -j LOG.

Personally, I don't do any kind of logging. I don't see the point. You can generate tons of useless information if you're not careful. I only turn on logging rules for specific temporary purposes.

Signature · 2 lines
    mail to this address is discarded unless "/dev/rob0"
    or "not-spam" is in Subject: header