Getting bandwidth details from each IP

[ryan]

We currently have a 515e in place and use it for our normal firewall routines. We then have a second system that does some other network security (ID, bandwidth, etc). Is it possible to actually have the PIX give reports on bandwidth for each IP passing through it? Like through a syslog program? I would preferr the data would be store in SQL Server if possible.

Thanks for any help you can offer.
Ryan

 

[yizhar]

HI.

Yes there are several 3rd party applications for parsing syslog messages and reporting.


Yizhar Hurwitz

http://come.to/yizhar

http://teachers.sivan.co.il/yizhar

 

[ryan]

Which are some good ones?

 

[yizhar]

HI.

This is a partial listing - I hope some other will add their favorite tools and their experience with them.

http://www.opensystems.com/SMB_products/PI/

http://www.netiq.com/products/fwr/default.asp

http://www.loganalysis.org/

http://www.reportgen.com/

http://www.kiwisyslog.com

This is a syslog server - it can also log to ODBC/SQL.
It is a great tool for receiving data from the pix, but you will need another application (your self made custom scripts or 3rd party)

Myself I also write an application for that purpose. It uses my own database format (not SQL) and parses syslog messages collect by syslog server like Kiwi.
You can send me email to get a beta version - I have not yet released it...


Yizhar Hurwitz

http://come.to/yizhar

http://teachers.sivan.co.il/yizhar