Are there any good tools to analyze iptalbes log?

Are there any good tools to analyze iptalbes log?

[Bobo]

Hello

    I am a new user of IPtables.Now,I need a tool to analysize the log of iptables.
  Would you please recommend some tools written in perl or shell language?

  Thanks

       

RE: Are there any good tools to analyze iptalbes log?

[Rowan Reid]

>     I am a new user of IPtables.Now,I need a tool to 
> analysize the log of iptables.
>   Would you please recommend some tools written in perl or 
> shell language?

http://logi.cc/linux/NetfilterLogAnalyzer.php3#1

cheers

Re: Are there any good tools to analyze iptalbes log?

[Hervé Eychenne]

On Fri, Mar 28, 2003 at 06:27:02PM +0800, Bobo wrote:

 Hi,

> I am a new user of IPtables.Now,I need a tool to analysize the log of iptables.
> Would you please recommend some tools written in perl or shell language?

If you're ready to try something else than slow scripting languages ;-),
you can have a look at
http://www.wallfire.org/wflogs/

 Herve

-- 
 _
(°=  Hervé Eychenne
//)
v_/_ WallFire project:  http://www.wallfire.org/

Re: Are there any good tools to analyze iptalbes log?

[Damphyr]

Once more, as a member of this list :).

I am having problems setting up NAT for my home LAN.

I get the following:

frigorifero root # iptables -v -t nat -A POSTROUTING -o ppp0 -j MASQUERADE
MASQUERADE  all opt -- in * out ppp0  0.0.0.0/0  -> 0.0.0.0/0
iptables: Invalid argument

ifconfig gives me:

eth0      Link encap:Ethernet  HWaddr 00:E0:29:09:C0:03
           inet addr:192.168.1.254  Bcast:192.168.1.255  Mask:255.255.255.0
           UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
           RX packets:3030 errors:0 dropped:0 overruns:0 frame:0
           TX packets:2349 errors:0 dropped:0 overruns:0 carrier:0
           collisions:0 txqueuelen:100
           RX bytes:225218 (219.9 Kb)  TX bytes:461036 (450.2 Kb)
           Interrupt:10 Base address:0xe400

eth1      Link encap:Ethernet  HWaddr 00:C0:DF:0E:6D:87
           UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
           RX packets:175 errors:0 dropped:0 overruns:0 frame:0
           TX packets:177 errors:0 dropped:0 overruns:0 carrier:0
           collisions:0 txqueuelen:100
           RX bytes:11152 (10.8 Kb)  TX bytes:11597 (11.3 Kb)
           Interrupt:12 Base address:0x6000

lo        Link encap:Local Loopback
           inet addr:127.0.0.1  Mask:255.0.0.0
           UP LOOPBACK RUNNING  MTU:16436  Metric:1
           RX packets:0 errors:0 dropped:0 overruns:0 frame:0
           TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
           collisions:0 txqueuelen:0
           RX bytes:0 (0.0 b)  TX bytes:0 (0.0 b)

ppp0      Link encap:Point-to-Point Protocol
           inet addr:217.234.xxx.xxx  P-t-P:217.5.xxx.xxx 
Mask:255.255.255.255
           UP POINTOPOINT RUNNING NOARP MULTICAST  MTU:1492  Metric:1
           RX packets:16 errors:0 dropped:0 overruns:0 frame:0
           TX packets:15 errors:0 dropped:0 overruns:0 carrier:0
           collisions:0 txqueuelen:3
           RX bytes:934 (934.0 b)  TX bytes:664 (664.0 b)

and iptables says:

frigorifero root # iptables -h
iptables v1.2.7a

My PPP link is a DSL line, I use rp-pppoe and I up it using adsl-start.
All modules for iptables load fine. I also tried the iptables commantd 
with eth1 as a parameter. Same result. Haven't been able to find any 
answer anywhere in the docs or list archives so please...heeeelp.

Can anyone tell me what am I doing wrong?
Thanks,
V.-



--
http://www.freemail.gr - δωρεάν υπηρεσία ηλεκτρονικού ταχυδρομείου.

NAT and pppoe

[Damphyr]

Once more, as a member of this list :).

I am having problems setting up NAT for my home LAN.

I get the following:

frigorifero root # iptables -v -t nat -A POSTROUTING -o ppp0 -j MASQUERADE
MASQUERADE  all opt -- in * out ppp0  0.0.0.0/0  -> 0.0.0.0/0
iptables: Invalid argument

ifconfig gives me:

eth0      Link encap:Ethernet  HWaddr 00:E0:29:09:C0:03
           inet addr:192.168.1.254  Bcast:192.168.1.255  Mask:255.255.255.0
           UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
           RX packets:3030 errors:0 dropped:0 overruns:0 frame:0
           TX packets:2349 errors:0 dropped:0 overruns:0 carrier:0
           collisions:0 txqueuelen:100
           RX bytes:225218 (219.9 Kb)  TX bytes:461036 (450.2 Kb)
           Interrupt:10 Base address:0xe400

eth1      Link encap:Ethernet  HWaddr 00:C0:DF:0E:6D:87
           UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
           RX packets:175 errors:0 dropped:0 overruns:0 frame:0
           TX packets:177 errors:0 dropped:0 overruns:0 carrier:0
           collisions:0 txqueuelen:100
           RX bytes:11152 (10.8 Kb)  TX bytes:11597 (11.3 Kb)
           Interrupt:12 Base address:0x6000

lo        Link encap:Local Loopback
           inet addr:127.0.0.1  Mask:255.0.0.0
           UP LOOPBACK RUNNING  MTU:16436  Metric:1
           RX packets:0 errors:0 dropped:0 overruns:0 frame:0
           TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
           collisions:0 txqueuelen:0
           RX bytes:0 (0.0 b)  TX bytes:0 (0.0 b)

ppp0      Link encap:Point-to-Point Protocol
           inet addr:217.234.xxx.xxx  P-t-P:217.5.xxx.xxx 
Mask:255.255.255.255
           UP POINTOPOINT RUNNING NOARP MULTICAST  MTU:1492  Metric:1
           RX packets:16 errors:0 dropped:0 overruns:0 frame:0
           TX packets:15 errors:0 dropped:0 overruns:0 carrier:0
           collisions:0 txqueuelen:3
           RX bytes:934 (934.0 b)  TX bytes:664 (664.0 b)

and iptables says:

frigorifero root # iptables -h
iptables v1.2.7a

My PPP link is a DSL line, I use rp-pppoe and I up it using adsl-start.
All modules for iptables load fine. I also tried the iptables commantd 
with eth1 as a parameter. Same result. Haven't been able to find any 
answer anywhere in the docs or list archives so please...heeeelp.

Can anyone tell me what am I doing wrong?
Thanks,
V.-



--
http://www.freemail.gr - δωρεάν υπηρεσία ηλεκτρονικού ταχυδρομείου.