Jeffrey Goldberg wrote:
> 
> On Aug 15, 2009, at 12:05 PM, Wolf wrote:
> 
>> i have a question.  How can i log the "Firewall states" under 
>> "Diagnostics".
>>
>> Exists some possibilities to manage this? I want a list with all 
>> connections from
>> IPaddress-A to IPaddress-X, daily. That i can record the connections 
>> from some clients.
> 
> You may tell m0n0wall to send logging information to another machine.  
> This is under
> 
>  Diagnostics -> Logs -> Settings
> 
> And check the box for "Enable syslog'ing to remote syslog server.
> 
> That other machine be running syslog (or something that does the job of 
> syslog) and be configured to listen for syslog messages from your m0n0wall.
> 
> I have a machine on my local network that is running syslog-ng that logs 
> messages from m0n0wall (and others).  I can then use a wide variety of 
> log analysis tools on those logs.

Jeffrey,

Could you provide a list on those tools, describe how you use them and 
what they are doing for you? I have been playing with fwanalog but am 
sorely disappointed in the output. I would like to hear about other 
tools that are actually being used.

Thanks,

Bob McConnell
N2SPP