🚀 go-pugleaf

Lawrence....I'm trying to get to your site to d/l the new beta....but no
access..
Both of my reporting programs show recent access..?? Other surfing is
ok.
burris

Lawrence Baldwin wrote:
> 
> As promised here is the >beta< release of myNetWatchman Agent for Win32 v1.11:
> 
> http://www.mynetwatchman.com/mynetwatchman/beta.htm
> 
> myNetWatchman (mNW) Agent does the following:
> 
> * Uploads your firewall attack reports the mNW server...in real time!
> 
> mNW server:
> * Filters false alarms, aggregates attacks from other agents, and handles >grunt< backtracing work
> * Automatically e-mails escalations to the responsible party
> * Provides you full status so you can track cases of interest
> 
> Agent software and service is FREE to individual Internet users (e.g. non-corporate).
> 
> Supported firewalls/routers are:
> 
> * BlackICE Defender
> * Zone Alarm
> * Netgear Cable/DSL router
> * (...others coming...requests taken)
> 
> (There is also a PerlAgent which supports several Linux firewalls...for Linux info and also more
> details on myNetWatchman see the sig link for details)
> 
> Now that Zone Alarm is supported, you guys/gals are probably going to crush me data, so I might as
> well be somewhat proactive and make the plea now for some volunteers/students/interns who are
> interested in this stuff.  Email me and I'll share my world of Internet security, abuse tracking,
> and protocol analysis in exchange for some help.  (Knowledge of a foreign language is a plus...esp.
> Korean!)
> 
> Also, I'm not a programmer/webmaster, I'm a protocol analyst, so please don't make too much fun of
> my lame user interface, web site design, etc...my primary goal for now is function not form.
> 
> Thanks for your time...hope you find this helpful.
> 
> lb.
> --
> Lawrence Baldwin
> Atlanta, GA
> myNetWatchman.com
> Automatic Port Scan Reporting: http://www.mynetwatchman.com/vision.htm

Burris,

I took about 8 disconnects (and 8 new IP addresses ) from ~5:30am - 6:45am this morning...even went 
to dial-backup for a few hours ealier in the morning.  It seems to have stabalized now.

lb.

In article <3AD8234C.BCFF333A@bellsouth.net>, responder@bellsouth.net says...
> Lawrence....I'm trying to get to your site to d/l the new beta....but no
> access..
> Both of my reporting programs show recent access..?? Other surfing is
> ok.
> burris
> 

-- 
Lawrence Baldwin
Baseline your FastAccess Connection: http://www.mynetwatchman.com/perfwatch/beta.htm
Automatic Port Scan Reporting: http://www.mynetwatchman.com/vision.htm

Oops! Sorry LB, I just installed and it uploaded my log. I should have
cleared it out first; it was 106k worth of crap. I apologize for that.

-Carlos Morales
-Ft Lauderdale


============================================================================
============
"Lawrence Baldwin" <baldwinl@mynetwatchman.com> wrote in message
news:MPG.1541e7e317b3f4379896bf@news2.mia.bellsouth.net...
> As promised here is the >beta< release of myNetWatchman Agent for Win32
v1.11:
>
> http://www.mynetwatchman.com/mynetwatchman/beta.htm
>
>
> myNetWatchman (mNW) Agent does the following:
>
> * Uploads your firewall attack reports the mNW server...in real time!
>
>
> mNW server:
> * Filters false alarms, aggregates attacks from other agents, and handles
>grunt< backtracing work
> * Automatically e-mails escalations to the responsible party
> * Provides you full status so you can track cases of interest
>
> Agent software and service is FREE to individual Internet users (e.g.
non-corporate).
>
>
> Supported firewalls/routers are:
>
> * BlackICE Defender
> * Zone Alarm
> * Netgear Cable/DSL router
> * (...others coming...requests taken)
>
> (There is also a PerlAgent which supports several Linux firewalls...for
Linux info and also more
> details on myNetWatchman see the sig link for details)
>
>
> Now that Zone Alarm is supported, you guys/gals are probably going to
crush me data, so I might as
> well be somewhat proactive and make the plea now for some
volunteers/students/interns who are
> interested in this stuff.  Email me and I'll share my world of Internet
security, abuse tracking,
> and protocol analysis in exchange for some help.  (Knowledge of a foreign
language is a plus...esp.
> Korean!)
>
> Also, I'm not a programmer/webmaster, I'm a protocol analyst, so please
don't make too much fun of
> my lame user interface, web site design, etc...my primary goal for now is
function not form.
>
> Thanks for your time...hope you find this helpful.
>
> lb.
> --
> Lawrence Baldwin
> Atlanta, GA
> myNetWatchman.com
> Automatic Port Scan Reporting: http://www.mynetwatchman.com/vision.htm

No, you did good...I WANT the old stuff...just don't send it TWICE!

thk.

lb.

In article <tQ4C6.5605$6R5.336266@news1.atl>, m00kie@bellsouth.net says...
> Oops! Sorry LB, I just installed and it uploaded my log. I should have
> cleared it out first; it was 106k worth of crap. I apologize for that.
> 
> -Carlos Morales
> -Ft Lauderdale

-- 
Lawrence Baldwin
Baseline your FastAccess Connection: http://www.mynetwatchman.com/perfwatch/beta.htm
Automatic Port Scan Reporting: http://www.mynetwatchman.com/vision.htm

Lawrence Baldwin wrote:

> Sam,
>
> Bring it on...here's the log support request process:
>
> http://www.mynetwatchman.com/mynetwatchman/logrequest.htm
>
> lb.
>
> In article <l_ZB6.5452$6R5.319127@news1.atl>, DerNetTech@nospam.myrealbox.com says...
> > LB, Would it be possible to do one for Sygate PFW?

Is there anyway to log the hits against a D-Link DI-701?

--
Jeff Folloder

"My god... It's full of stars!"
  -Dave Bowman, 2001 A Space Odyssey

Jeff,

It doesn't look like it...I scoured the manual ... the word "log" is only mentioned once...and it's 
"log in".  I see no reference to 'syslogd', SNMP traps, or even 'logging'.


lb.

In article <3AD9A145.1D1137AD@folloder.com>, jeff@notthisfolloder.com says...
> Lawrence Baldwin wrote:
> 
> > Sam,
> >
> > Bring it on...here's the log support request process:
> >
> > http://www.mynetwatchman.com/mynetwatchman/logrequest.htm
> >
> > lb.
> >
> > In article <l_ZB6.5452$6R5.319127@news1.atl>, DerNetTech@nospam.myrealbox.com says...
> > > LB, Would it be possible to do one for Sygate PFW?
> 
> Is there anyway to log the hits against a D-Link DI-701?
> 
> --
> Jeff Folloder
> 
> "My god... It's full of stars!"
>   -Dave Bowman, 2001 A Space Odyssey
> 
> 
> 

-- 
Lawrence Baldwin
Baseline your FastAccess Connection: http://www.mynetwatchman.com/perfwatch/beta.htm
Automatic Port Scan Reporting: http://www.mynetwatchman.com/vision.htm

[This followup was posted to comp.dcom.modems.cable and a copy was sent to the cited author.]

mynetwatchman.com/mynetwatchman/beta.htm



In article <Y3_B6.2188$x4.227446@newsread2.prod.itd.earthlink.net>, fpickel@no-spam-yahoo.com 
says...
> Any hints on how to find a windows based logger for Netgear?  Does it need
> to be on a 24/7 machine on the network?  Which operating system (Win98 is
> what I need)?
> 
> 


-- 
Lawrence Baldwin
Baseline your FastAccess Connection: http://www.mynetwatchman.com/perfwatch/beta.htm
Automatic Port Scan Reporting: http://www.mynetwatchman.com/vision.htm

> <baldwinl@mynetwatchman.com> wrote:
>
> >Is it the Netgear or does the syslogd add a timestamp when the log entry
is created?

<rtoledo@gte.net> wrote in message
>
> I'm pretty sure the Sysloger generates the time stamp *from* the time
> on the Netgear

No, Peter Abrams is correct. The syslog message from the router have NO time
information. This is added by the receiving end based on the host clock.

    C.

On Sat, 14 Apr 2001 17:43:31 -0400, Peter D Abrams, <pabrams@bellsouth.net> wrote:
>     Lawrence - Using the Kiwi service manager daemon on NT4, the log
> entries are apparently time stamped by the service, not the Netgear.

  Ditto for RedHat 6.2 linux syslogd receiving remote from the Netgear.
The main thing is to keep your computer's time accurate.

-- 
Walter Dnes
<waltdnes@waltdnes.org>

<rtoledo@gte.net> wrote in message news:9gojdto7qbinp84oorb3autskfv51gt13i@4ax.com...
> On Sat, 14 Apr 2001 15:32:08 GMT,  "FredP" <fpickel@no-spam-yahoo.com>
> wrote:
> 
> >Any hints on how to find a windows based logger for Netgear?  Does it need
> >to be on a 24/7 machine on the network?  Which operating system (Win98 is
> >what I need)?
> >
> does the Netgear *support* syslogging?
> is there a switch for it?
> does it use TCP 514?

Yes, to all of the above.

-- 
---------------------------------------------------------------------------
Duncan -- If posted to a newsgroup, please keep topical replies there.  
They get my priority replies.  --  Give your computer some brain candy!
Help with a distributed computing project!  --  http://www.distributed.net
---------------------------------------------------------------------------

Yes, *any* syslogd can be used to capture log info from the Netgear, however (as I'm now finding 
out), each syslogd can potentially log the info it gets from the Netgear in slightly different ways.

For example, the date may be formatted differently.

For the momement I'm recommending Kiwi's syslogd so that I can parse ONE format.

lb.

In article <9gojdto7qbinp84oorb3autskfv51gt13i@4ax.com>, rtoledo@gte.net says...
> On Sat, 14 Apr 2001 15:32:08 GMT,  "FredP" <fpickel@no-spam-yahoo.com>
> wrote:

> 
> then *any* syslogger for windows will work
> otherwise you might be SOL
> 

-- 
Lawrence Baldwin
Baseline your FastAccess Connection: http://www.mynetwatchman.com/perfwatch/beta.htm
Automatic Port Scan Reporting: http://www.mynetwatchman.com/vision.htm

On Sun, 15 Apr 2001 18:03:49 GMT, rtoledo@gte.net, <rtoledo@gte.net> wrote:
> On Sat, 14 Apr 2001 15:32:08 GMT,  "FredP" <fpickel@no-spam-yahoo.com>
> wrote:
> 
> >Any hints on how to find a windows based logger for Netgear?  Does it need
> >to be on a 24/7 machine on the network?  Which operating system (Win98 is
> >what I need)?
> >
> does the Netgear *support* syslogging?
> is there a switch for it?
> does it use TCP 514?

  Yes it does.  However, the documentation is harder to find than in
unix :( The Netgear RT314 is actually an OEM'd ZYXEL Prestige 314.  The
relevant support notes are at...

http://www.zyxel.com/support/supportnote/p314/index_f.htm

  The site uses frames, so from there you have to manually click on...

* Application notes

...and then manually click on...

* Setup syslog on UNIX 

-- 
Walter Dnes
<waltdnes@waltdnes.org>

"Walter Dnes" <waltdnes@waltdnes.org> wrote in message news:9bgfo3$vv7$1@news.tht.net...
>   Yes it does.  However, the documentation is harder to find than in
> unix :( The Netgear RT314 is actually an OEM'd ZYXEL Prestige 314.  The
> relevant support notes are at...
> 
> http://www.zyxel.com/support/supportnote/p314/index_f.htm
> 
>   The site uses frames, so from there you have to manually click on...
> 
> * Application notes
> 
> ...and then manually click on...
> 
> * Setup syslog on UNIX 

... or simply try this... works here (I used frame properties to get the address for the specific frame):
http://www.zyxel.com/support/supportnote/p314/app/syslog.htm

-- 
---------------------------------------------------------------------------
Duncan -- If posted to a newsgroup, please keep topical replies there.  
They get my priority replies.  --  Give your computer some brain candy!
Help with a distributed computing project!  --  http://www.distributed.net
---------------------------------------------------------------------------

In comp.dcom.xdsl Christian Altenbach <altenbach@mediaone.net.invalid> wrote:
> No, Peter Abrams is correct. The syslog message from the router have NO time
> information. This is added by the receiving end based on the host clock.

add info (not for you Chris, obviously :-)

the internal logging however, is timestamped by the router itself. if
the router has a menu that supports NTP, daytime etc, you shoudl check
out menu 24.10; if it's not there, the f/w doesn't have it.