[fwgold-users] Re: Services

  • From: "Gianluca Rotoni" <gianluca@xxxxxxxxxx>
  • To: fwgold-users@xxxxxxxxxxxxx
  • Date: Wed, 22 Oct 2003 06:37:42 +0000

Strange. It works fine for me with your example config.
Did you create the DB with the right userdb.conf? Did you
restart fwgold server?

Regards,
Gianluca

> I tried that, and its still not getting it :( Any suggestions
> 
> Oct 20 19:32:13 mail kernel: IN IN=eth0 OUT= MAC=xx:xx:xx:xx:xx
> SRC=xx.xx.xx.xx DST=xx.xx.xx.xx LEN=48 TOS=0x00 PREC=0x00 TTL=108
> ID=11615 DF PROTO=TCP SPT=65253 DPT=22 WINDOW=64240 RES=0x00 SYN URGP=0
> 
> DB      fw-connection-types-in
>         TITLE           Incoming Connections
>         VLABEL          Connections / Minute
>         MATCH           total
>                         Prefix          eq      IN
>                         Color           eq      #FFFF00
>         ENDMATCH
>         MATCH           SSH
>                         Prefix          eq      IN
>                         DPT             eq      22
>                         Color           eq      #FF0000
>         ENDMATCH
> ENDDB
> 
> -----Original Message-----
> From: fwgold-users-bounce@xxxxxxxxxxxxx
> [mailto:fwgold-users-bounce@xxxxxxxxxxxxx] On Behalf Of Gianluca Rotoni
> Sent: Monday, October 20, 2003 9:50 PM
> To: fwgold-users@xxxxxxxxxxxxx
> Subject: [fwgold-users] Re: Services 
> 
> 
> Hi,
> 
> Try and use DPT instead of services. See /var/log/messages for more
> details.
> 
> Regards,
> Gianluca
> 
> > HI,
> >  
> > Just started working with it.  Great program does almost exactly what
> I
> > want.  
> >  
> > My problem: I would like to graph connections per port.  The problem
> is
> > it graphs total connections but not SSH.  Any suggestions?  I use
> > netfilter on linux. And have the default log prefix of IN per Install
> > instructions.
> >  
> >  
> >  
> >  
> > DB      fw-connection-types-in
> >         TITLE           Incoming Connections
> >         VLABEL          Connections / Minute
> >         MATCH           total
> >                         Prefix          eq      IN
> >                         Color           eq      #FFFF00
> >         ENDMATCH
> >         MATCH           SSH
> >                         service         eq      22
> >                         Color           eq      #FF0000
> >         ENDMATCH
> > ENDDB
> >  
> >  
> >  
> > TIA,
> > William
> > 
> > =================================================
> >         Archives of this mailing list's 
> >          messages ca be retrieved from
> >  //www.freelists.org/archives/fwgold-users 
> > =================================================
> >      To unsubscribe from this maling list
> > send a mail to fwgold-users-request@xxxxxxxxxxxxx
> >      with the word "unsubscribe" as subject.
> > =================================================
> >    To administer your account visit the site :
> >    //www.freelists.org/cgi-bin/lsg2.cgi
> > =================================================
> > 
> 
> 
> =================================================
>         Archives of this mailing list's 
>          messages ca be retrieved from
>  //www.freelists.org/archives/fwgold-users 
> =================================================
>      To unsubscribe from this maling list
> send a mail to fwgold-users-request@xxxxxxxxxxxxx
>      with the word "unsubscribe" as subject.
> =================================================
>    To administer your account visit the site :
>    //www.freelists.org/cgi-bin/lsg2.cgi
> =================================================
> 
> =================================================
>         Archives of this mailing list's 
>          messages ca be retrieved from
>  //www.freelists.org/archives/fwgold-users 
> =================================================
>      To unsubscribe from this maling list
> send a mail to fwgold-users-request@xxxxxxxxxxxxx
>      with the word "unsubscribe" as subject.
> =================================================
>    To administer your account visit the site :
>    //www.freelists.org/cgi-bin/lsg2.cgi
> =================================================
> 


=================================================
        Archives of this mailing list's 
         messages ca be retrieved from
 //www.freelists.org/archives/fwgold-users 
=================================================
     To unsubscribe from this maling list
send a mail to fwgold-users-request@xxxxxxxxxxxxx
     with the word "unsubscribe" as subject.
=================================================
   To administer your account visit the site :
   //www.freelists.org/cgi-bin/lsg2.cgi
=================================================

Other related posts: