[logs] Cisco PIX logs with IP addresses only

James jimbob.coffey at gmail.com
Sun Jul 29 15:34:02 PDT 2007


On 7/24/07, R.L. Nevot <r.nevot at gmail.com> wrote:
> typing ' no names ' would do the job.

To avoid each individual vendors decision on how they render their logs
ie name or ip address we name our firewall objects in the following manner

<name>_<ip address>.

Then your log crunching can use name or ip address and you will be guaranteed
to match. (good for grepping access-lists as well).

-- 
jac


More information about the LogAnalysis mailing list