Fwlogwatch

Jul 20, 2023

Packet filter and firewall log analyzer

fwlogwatch is a packet filter and firewall log analyzer

General features

  • Can detect and process log entries in the following formats
  • Linux ipchains, Linux netfilter/iptables, Solaris/BSD/Irix/HP-UX ipfilter, BSD ipfw, Cisco IOS, Cisco PIX / FWSM, NetScreen, Windows XP firewall, Elsa Lancom router, Snort IDS
  • Entries can be parsed from single, multiple and combined log files, the parsers to be used can be selected.
  • Gzip-compressed logs are supported transparently.
  • Can separate recent from old entries and detects timewarps in log files.
  • Can recognize ‘last message repeated’ entries concerning the firewall.
  • Integrated resolver for protocols, services and host names.
  • Can do lookups in the whois database.
  • Own DNS and whois information cache for faster lookups.
  • Hosts, networks, ports, chains and branches targets can be selected or excluded as needed.
  • Support for internationalization available in english, german, portuguese, simplified and traditional chinese, swedish and japanese.


Checkout these related ports:
  • Zzuf - Transparent application input fuzzer
  • Zlint - X.509 certificate linter
  • Zeronet - Decentralized websites using Bitcoin crypto and BitTorrent network
  • Zenmap - GUI frontend for the Nmap scanning utility
  • Zeek - System for detecting network intruders in real-time
  • Zaproxy - The OWASP zed attack proxy
  • Yubioath-desktop - GUI for displaying OATH codes with a Yubikey
  • Yubikey-personalization-gui - Graphical YubiKey personalization tool
  • Yubikey-manager-qt - Cross-platform application for configuring any YubiKey
  • Yubikey-agent - Seamless ssh-agent for YubiKeys
  • Yubico-piv-tool - Yubico PIV tool
  • Ylva - Command line password manager and file encryption program
  • Ykpers - Library and tool for personalization of Yubico's YubiKey
  • Ykclient - Yubico C client library
  • Yersinia - Layer 2 vulnerability scanner (switches, spanning tree, 802.1q ...)