Cisco PIX and Kiwi Syslogd

[cmtoth]

I have a Cisco PIX 506e[v. 6.3(3)]

I've had issues with remote users getting their connection dropped while using the Cisco VPN client[v.4.0.2(D)]. Once the connection is dropped, they cannot log back into the VPN unless I issue a 'reload' command on the PIX.

So following some good advice here, I installed and configured the Kiwi Syslogd program and I am now logging at level 6(informational).

So now I have all this data, what do I do with it? It's a ton of data to sort through, and I have no idea what to even begin to look for.

Any suggestions?

Thank you

 

[ShoKashuki]

I use a program called FireGen to parse the logs into something humans can read.

http://www.firegen.com

 

[cmtoth]

Thanks. This looks like a good program. I appreciate the link.