Blogs about: Firewall Log Analysis
Featured Blog
Easter log analysis
Here is a look at the logs for typical “holiday” day on a busy webserver. Here are the sections of the report created by FireGen: 1. Web traffic (HTTP/HTTPS) – Internal users (outbou… more →
Firewall Log Analysis
Easter log analysis
firegen wrote 8 months ago: Here is a look at the logs for typical “holiday” day on a busy webserver. Here are the s … more →
TCP/135 (Microsoft RPC) traffic
firegen wrote 1 year ago: One of the protocols monitored in FireGen (www.firegen.com) is TCP/135 used by Microsoft RCP (Remote … more →
Bad TCP hdr length
firegen wrote 1 year ago: In almost every report we can find 2-3 messages in the “Warnings and notifications” sect … more →
More from 194.59.120.11...
firegen wrote 1 year ago: One previous post was looking at the activity recorded by IP 194.59.120.11 in our firewall logs. Sin … more →
Denied protocols
firegen wrote 1 year ago: It is good to keep an eye on what protocols are currently denied by the firewall. New protocols may … more →
What's with IP 194.59.120.11?
firegen wrote 1 year ago: The traffic for our popular website that we analyze with FireGen contains quite a few connections fr … more →
%PIX-2-106001 Denied inbound
firegen wrote 1 year ago: One of the most common critical messages appears to be the %PIX-2-106001 one, and it is recorded whe … more →
%PIX-4-419001 - MSS exceeded
firegen wrote 1 year ago: We have noticed in our daily log a few warning messages stating that the MSS was exceeded (and the p … more →
