Article View: comp.security.firewalls
Article #274Netgear syslogd?
From: Lawrence Baldwin
Date: Sat, 14 Apr 2001 18:05
Date: Sat, 14 Apr 2001 18:05
72 lines
3728 bytes
3728 bytes
[This followup was posted to comp.security.firewalls and a copy was sent to the cited author.] .htm Does anyone know exactly what generates the timestamp when you use the Netgear with a syslogd like this? Is it the Netgear or does the syslogd add a timestamp when the log entry is created? If the former, then how does the Netgear maintain accurate time? (is NTP supported??) thanks. lb. In article <Y3_B6.2188$x4.227446@newsread2.prod.itd.earthlink.net>, fpickel@no-spam-yahoo.com says... > Any hints on how to find a windows based logger for Netgear? Does it need > to be on a 24/7 machine on the network? Which operating system (Win98 is > what I need)? > > > "Lawrence Baldwin" <baldwinl@mynetwatchman.com> wrote in message > news:MPG.1541e7e317b3f4379896bf@news2.mia.bellsouth.net... > > As promised here is the >beta< release of myNetWatchman Agent for Win32 > v1.11: > > > > http://www.mynetwatchman.com/mynetwatchman/beta.htm > > > > > > myNetWatchman (mNW) Agent does the following: > > > > * Uploads your firewall attack reports the mNW server...in real time! > > > > > > mNW server: > > * Filters false alarms, aggregates attacks from other agents, and handles > >grunt< backtracing work > > * Automatically e-mails escalations to the responsible party > > * Provides you full status so you can track cases of interest > > > > Agent software and service is FREE to individual Internet users (e.g. > non-corporate). > > > > > > Supported firewalls/routers are: > > > > * BlackICE Defender > > * Zone Alarm > > * Netgear Cable/DSL router > > * (...others coming...requests taken) > > > > (There is also a PerlAgent which supports several Linux firewalls...for > Linux info and also more > > details on myNetWatchman see the sig link for details) > > > > > > Now that Zone Alarm is supported, you guys/gals are probably going to > crush me data, so I might as > > well be somewhat proactive and make the plea now for some > volunteers/students/interns who are > > interested in this stuff. Email me and I'll share my world of Internet > security, abuse tracking, > > and protocol analysis in exchange for some help. (Knowledge of a foreign > language is a plus...esp. > > Korean!) > > -- Lawrence Baldwin Baseline your FastAccess Connection: http://www.mynetwatchman.com/perfwatch/beta.htm Automatic Port Scan Reporting: http://www.mynetwatchman.com/vision.htm
Technical Details
Message-ID:
<MPG.15425b6ecc80b6249896c5@news2.mia.bellsouth.net>Path:
arc1-ca.pugleaf.net!supernews.google.com!sn-xit-03!supernews.com!news-out.visi.com!hermes.visi.com!news.maxwell.syr.edu!newsfeed.atl.bellsouth.net.MISMATCH!newsfeed.atl!news2.mia.POSTED!not-for-mailReferences:
<MPG.1541e7e317b3f4379896bf@news2.mia.bellsouth.net> <Y3_B6.2188$x4.227446@newsread2.prod.itd.earthlink.net>Show Full Headers
Complete Article Headers
X-Google-Language: ENGLISH,ASCII-7-bit X-Google-Thread: f922c,4f095cf8e5a8f1d2 X-Google-Attributes: gidf922c,public X-Google-Thread: 1122a6,4f095cf8e5a8f1d2 X-Google-Attributes: gid1122a6,public X-Google-Thread: f5dc1,4f095cf8e5a8f1d2 X-Google-Attributes: gidf5dc1,public X-Google-Thread: 113850,4f095cf8e5a8f1d2 X-Google-Attributes: gid113850,public X-Google-ArrivalTime: 2001-04-14 11:06:09 PST Path: arc1-ca.pugleaf.net!supernews.google.com!sn-xit-03!supernews.com!news-out.visi.com!hermes.visi.com!news.maxwell.syr.edu!newsfeed.atl.bellsouth.net.MISMATCH!newsfeed.atl!news2.mia.POSTED!not-for-mail From: Lawrence Baldwin <baldwinl@mynetwatchman.com> Newsgroups: comp.security.firewalls,bellsouth.net.support.adsl,comp.dcom.xdsl,comp.dcom.modems.cable Subject: Netgear syslogd? Message-ID: <MPG.15425b6ecc80b6249896c5@news2.mia.bellsouth.net> References: <MPG.1541e7e317b3f4379896bf@news2.mia.bellsouth.net> <Y3_B6.2188$x4.227446@newsread2.prod.itd.earthlink.net> Organization: System Management Technologies, Inc. X-Newsreader: MicroPlanet Gravity v2.50 Lines: 72 Date: Sat, 14 Apr 2001 14:05:26 -0400 NNTP-Posting-Host: 208.61.190.133 X-Trace: news2.mia 987271526 208.61.190.133 (Sat, 14 Apr 2001 14:05:26 EDT) NNTP-Posting-Date: Sat, 14 Apr 2001 14:05:26 EDT