有什么软件可以分析pfirewall.log的记录？

imdba

和IIS那种日志模式？

sbt709394

是防火墙里的那个\"安全日志记录\"吗?

imdba

光是记录拒绝连接的记录就很多了

Schnaufer

http://www.snapfiles.com/get/firelogxp.html\r\n\r\nBTW, the log is a W3C Extended File format log, and it can be opened and analyzed in Notepad, written to a database, or by third party logging utilities.

sbt709394

直接用写字板打开就可以读啦

Schnaufer

最初由 sbt709394 发布\r\n[B]直接用写字板打开就可以读啦 [/B]

\r\nimdba wants to analyze the logs, not to read them.

sbt709394

最初由 Schnaufer 发布
[B]
imdba wants to analyze, not to read the data. [/B]

我还是不太会看,麻烦版主帮我分析一下,可以吗?

imdba

谢谢！我知道如何分析了!\r\n\r\n但是 那个日志归档的是不是没法做？

ccnp_server

XP firewall log viewer这东西能看IIS日志么? 呵呵

Schnaufer

最初由 imdba 发布\r\n[B]谢谢！我知道如何分析了!\r\n\r\n但是 那个日志归档的是不是没法做？ [/B]

\r\nIf the maximum allowable size for pfirewall.log is exceeded, the information that the log file contains is written to a new file and saved as pfirewall.log.1(Windows XP) and pfirewall.log.old (Windows Server 2003), and the information that had been in pfirewall.log.old is overwritten. The new information is saved in pfirewall.log. You can use other utilities to rename and archive pfirewall.log.old file.