Re: [Wallfire-users] Using wflogs/cisco_pix for ip accounting

[E. <rv...@wa...>]

On Sun, Apr 27, 2003 at 11:31:44PM +0200, Friedhelm Duesterhoeft wrote:

 Hi,

> thanx for your reply. Please find attached some sample logs (only PIX-6 
> lines). I think the sample should include all sorts - at least all I'm 
> interested in at the moment ;-). At at first view there are not too many 
> variations so I hope it's not very hard for you to build the regexps 
> required.

> It would be nice if you could include pix info level parsing in one of the 
> next releases. Wflogs rocks - thanks alot for your efforts!

Please have a look at
http://www.cisco.com/univercd/cc/td/doc/product/iaabu/pix/pix_sw/v_63/63syslog/pixemsgs.htm

As you can see, one can spend some time sorting out meaningful messages
for wflogs...  :-/
Friedhelm, if you (or someone else) want to gather all error messages
that should be treated by wflogs, I would be glad to do the parsing as
quickly as possible.

 Hervé

-- 
 _
(°=  Hervé Eychenne
//)
v_/_ WallFire project:  http://www.wallfire.org/