analyze pix logs

[graver]

What do you all use to analyze your pix logs?

I am in need of some software to make my life easier.

Tamra Graver --CNA, Network+
*************************************
It is my job to comfort the disturbed
and disturb the comfortable..........

 

[MrZodiac]

I've got my pix set up to log via syslog to a remote machine, on that machine I've got a perl script hacked togeather that notes how many connections were made by each internal IP address and what port. NTOP runs and gives me better specifics if needed.

 

[Arisap]

I found a great program called Sawmill Log Analyzer

http://www.sawmill.net/

I would set the PIX to log debugging to a Syslog server like Kiwisyslog and have Sawmill analyze the files.

 

[br0ck]

Wow,

Be careful setting the logging to debug
that will put a load on your pix that might slow down the box

Here is a thread that has some good info
thread35-1177484

i would look at info level