- Monitoring Internet communications ?
- Posted by Keith (Southend) on April 9th, 2006
I was wondering whether there was a log or software that available that
lists ALL remote sites that have connected to your computer through the
internet. Would be useful to see whether my firewall and AdAware &
Spybot etc was doing it's job.
Thanks
--
Keith (Southend)
http://www.southendweather.net
- Posted by David H. Lipman on April 9th, 2006
From: "Keith (Southend)" <kharris@kharris.demon.co.uk>
| I was wondering whether there was a log or software that available that
| lists ALL remote sites that have connected to your computer through the
| internet. Would be useful to see whether my firewall and AdAware &
| Spybot etc was doing it's job.
|
| Thanks
If you use a NAT Router than the Router can log to a SysLog server or to a PC loaded with
software such as WallWatacher -- http://www.wallwatcher.com/
My BEFSR81 logs to a PC loaded with WallWatcher.
--
Dave
http://www.claymania.com/removal-trojan-adware.html
http://www.ik-cs.com/got-a-virus.htm
- Posted by Keith (Southend) on April 9th, 2006
David H. Lipman wrote:
I have a NAT Router so I'll give WallWatcher a go. Many thanks David.
--
Keith (Southend)
http://www.southendweather.net
- Posted by Don Kelloway on April 10th, 2006
"Keith (Southend)" <kharris@kharris.demon.co.uk> wrote in message
news:e1bqfe$77k$1$8300dec7@news.demon.co.uk...
For reference and not to pick a nit, there shouldn't be *any* occurrences of
remote sites connecting to your computer as your firewall solution should
prevent all inbound connections. However there will be many instances of
your computer connecting to remote sites and your firewall should be
configured to record the connection in a log of some sort. It's that log
which you'll want to examine.
--
Best regards, from Don Kelloway of Commodon Communications
Visit http://www.commodon.com to learn about the "Threats to Your Security
on the Internet".
- Posted by Keith (Southend) on April 10th, 2006
David H. Lipman wrote:
Both WallWatcher and Library files downloaded and unzipped into a folder
and programme exe fine. I don't seem to be seeing any logs and also
don't see my Router in the list of supported Routers. I have a Solwise
SAR715. I'll have a read through the help files but is this possibly a
non-starter?
Thanks
--
Keith (Southend)
http://www.southendweather.net
- Posted by David H. Lipman on April 10th, 2006
From: "Keith (Southend)" <kharris@kharris.demon.co.uk>
| Both WallWatcher and Library files downloaded and unzipped into a folder
| and programme exe fine. I don't seem to be seeing any logs and also
| don't see my Router in the list of supported Routers. I have a Solwise
| SAR715. I'll have a read through the help files but is this possibly a
| non-starter?
|
| Thanks
If it is NOT listed the author can add it if it supports SNMP or SysLog.
--
Dave
http://www.claymania.com/removal-trojan-adware.html
http://www.ik-cs.com/got-a-virus.htm
- Posted by Keith (Southend) on April 10th, 2006
Keith (Southend) wrote:
WallWatcher_Error.log
2006-04-10 19:47:23.02 Error in IniWrite: invalid Router number; changes
not saved ; WWver=3.2.2904
<snip>
If a programming error occurs, this indicator will turn red and the
reason will be placed in "WallWatcher_Error.Log". The indicator will
remain red until you click it to clear the warning.
<snip>
It is red.
--
Keith (Southend)
http://www.southendweather.net
- Posted by David H. Lipman on April 10th, 2006
From: "Keith (Southend)" <kharris@kharris.demon.co.uk>
| Keith (Southend) wrote:
|
| WallWatcher_Error.log
|
| 2006-04-10 19:47:23.02 Error in IniWrite: invalid Router number; changes
| not saved ; WWver=3.2.2904
|
| <snip>
| If a programming error occurs, this indicator will turn red and the
| reason will be placed in "WallWatcher_Error.Log". The indicator will
| remain red until you click it to clear the warning.
| <snip>
|
| It is red.
From the WallWatcher URL...
"CONTACT INFORMATION
support (at) wallwatcher.com (replace " (at) " with "@"). Please include the program name
("WallWatcher", "WW", "WRV", "GetLog", or "DShield") in the SUBJECT line to bypass the spam
filters. "
--
Dave
http://www.claymania.com/removal-trojan-adware.html
http://www.ik-cs.com/got-a-virus.htm
- Posted by Keith (Southend) on April 10th, 2006
David H. Lipman wrote:
<snip>
If it is NOT listed the author can add it if it supports SNMP or SysLog.
<snip>
Thanks David for your help.
Ok, my Router is a few years old and I found an archive spec for it...
http://www.solwise.co.uk/adsl-sar715.htm
Just trying to establish whether it does support SysLog before I e-mail
wallwatcher, but am struggling to find anything that mentions it, which
leads me to think it doesn't. All I can find is: "· All management and
monitoring can be done through SNMP or Telnet session. "
Thanks
--
Keith (Southend)
http://www.southendweather.net
- Posted by Keith (Southend) on April 11th, 2006
David H. Lipman wrote:
I e-mailed WallWatcher and this is the reply...
<snip>
<snip>
So it looks doubtful whether I can run WallWatcher with my Router,
however I will e-mail the manufacturer.
Regards
--
Keith (Southend)
http://www.southendweather.net
- Posted by David H. Lipman on April 11th, 2006
From: "Keith (Southend)" <kharris@kharris.demon.co.uk>
|
| <snip>
|
| So it looks doubtful whether I can run WallWatcher with my Router,
| however I will e-mail the manufacturer.
|
| Regards
|
Oh well.
From what I saw it looks like it is a Router/Modem. If it can be placed in a purely
Briodges mode (modem only) then you may be able to use an external router that will support
logging.
--
Dave
http://www.claymania.com/removal-trojan-adware.html
http://www.ik-cs.com/got-a-virus.htm
- Posted by Keith (Southend) on April 11th, 2006
David H. Lipman wrote:
It will be something I will consider next time I buy a new 4 port ADSL
Router.
Thanks
--
Keith (Southend)
http://www.southendweather.net