My initial thoughts about WallWatcher (WW).

1. I installed two relatively small files on a windows XP workstation.
The instructions for setup are pretty clear. The help documentation is
pretty extensive. I found the install to be pretty easy.

2. Setup..again pretty easy, as long as you remember to disable the
current syslogd running on the system :) AND very flexible with
respect to displays, alerts, what's logged...etc.

3. Alerts in the log capture screen can be sorted on the fly simply by
clicking the column header. I reports Inbound, Outbound, IP, FQDN,
Port...etc

4. Reporting can generate graphical reports by many different
values...IP, WAN, LAN, Port.

5. WW can use SNMP for Bandwidth Useage reporting. The capture rate
can be set at whatever interval you need. WW can also generate a
graphical report for bandwidth useage.

To go on would be to reproduce the help file. There's tons more
features. I spent about an hour playing with WW. I like it and I plan
to continue using it. If what you need is firewall logging and
reporting AND it needs to be easy and cheap, WW is worth looking into.

It's just my opinion, but I think it should be added to the docbook
section 10.7 logging
http://m0n0.ch/wall/docbook/ref-logging.html

The one nice thing that KIWI does, that WW does not do is report the
Filter rule (@17, @3...etc)

btw...This was tested using m0n0wall v 1.11, for a small office. WW
was loaded on a windows XP box. Our interent connection is froma
fractional T-1.

- Don

On 4/14/05, sai <sonicsai at gmail dot com> wrote:
> well, Don, if you have used this could you tell us your thoughts?
> 
> sai
> 
> On 4/12/05, Don Munyak <don dot munyak at gmail dot com> wrote:
> > Anybody using wallwatcher with m0n0wall.
> > If so, what are your thoughts about it ?
> >
> > wallwatcher.com/
> >
> > - Don
> >
> > ---------------------------------------------------------------------
> > To unsubscribe, e-mail: m0n0wall dash unsubscribe at lists dot m0n0 dot ch
> > For additional commands, e-mail: m0n0wall dash help at lists dot m0n0 dot ch
> >
> >
>