Cisco syslog analysis tool

I am looking for some Cisco syslog analysis tool, software that will take a large amount of data and try to identify possible intrusion...

Any such software out there?
SPERTWAsked:
Who is Participating?
 
Kamran ArshadConnect With a Mentor IT AssociateCommented:
Hi,

If it is just a syslog manager then you can check out any of the below solutions;

Lire      www.logreport.org      Open-Source
Epylog Log Analyzer      linux.duke.edu/projects/epylog      Open-Source
SLAPS-2      www.openchannelfoundation.org      Open-Source
Sisyphus      www.cs.sandia.gov      Open-Source
LogHound      www.estpak.ee/%7Eristo      Open-Source
syslog-ng      www.balabit.com      Open-Source
SysLog Manager      www.theonesoftware.com      Propriety
WinSyslog      www.winsyslog.com      Propriety
syslog_manager      www.theonesoftware.com      Propriety
logserver      www.op5.com      Propriety
Syslog Watcher      www.snmpsoft.com      Propriety
tftpd3d      tftpd32.jounin.net      Propriety
Syslog Collector      www.loriotpro.com      Propriety
NetDecision LogVision      www.netmechanica.com      Propriety
KiwiSysLog      www.kiwisyslog.com      Propriety
SolarWinds      www.solarwinds.com      Propriety

But I feel that you are using pix firewall or something similar and you need more details. For that purpose you need a firewall analyzer. Below are good list;

Adventnet Firewall Analyzer      www.adventnet.com
FirePlotter      www.fireplotter.com
Sawmill      www.sawmill.net
AlgoSec Firewall Analyzer      www.algosec.com
WallWatcher      www.wallwatcher.com
Firewall Analyzer      www.kdware.com
0
 
nodiscoCommented:
Hey

the kiwisyslog viewer and sawmill syslog viewer are both v good - try em out and see what you think

http://www.kiwisyslog.com/kiwi-log-viewer-overview/

http://www.sawmill.net/

cheers
0
 
SPERTWAuthor Commented:
Thanks for the reply!

You guys given me so many choices!

We would prefer a software vendor that will have support, which one would be a better choice?

thanks
0
 
buckethead34Commented:
I use Kiwi Syslog and they have pretty decent support. They're newest beta version has a Web Interface that you can access as well to see the messages.
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.