SG Broadband Community

LinkLogger

I take it Spector runs on the system being monitored and can only monitor that system?

Blake

LinkLogger

Since the logging capabilities of your Linksys falls far short of your WatchGuard (as does the price), there isn't a utility like what you're looking for. Link Logger is as far as it goes for the Linksys.

If you want to see the raw logging data sent out by the Linksys in Link Logger then go to the ...

LinkLogger

DShieldUp is a free utility for Link Logger that allows you to send your logs from Link Logger (supports Linksys, Netgear, Prestige or Zywall routers) to DShield.org where they can be used to help clean up the internet. For more information concerning DShield please visit http://www.dshield.org ...

LinkLogger

We have released the Prestige/Netgear version of Link Logger and its available for download at our web site http://www.LinkLogger.com. This version of Link Logger is for recent versions of the ZyNOS based products, which would include the ZyXEL Prestige 310, 314, 316 and the Netgear RP114, RT311 ...

LinkLogger

Have you tried Link Logger or other Logging products for the Linksys? From one system you would see what sites your kids are visiting and such. With Link Logger you could even set an alarm on port 21 (ftp) such that when one of the kids downloaded something you could be informed immediately for ...

LinkLogger

Originally posted by BlackSword
If the Zywall is solid, and you are happy with it,,, then why change routers?

Actually I went from a Linksys to the Zywall and will go to something else, as I'm looking for worthy routers to port our Link Logger software to. So far I've liked both the Linksys ...

LinkLogger

I like the ZyXEL ZyWALL 10 I'm currently using. Might try a Nexland next to see what all the fuss is about, but the Zywall has been solid so far.

Blake

LinkLogger

Actually I was about to post a question as to what Zyxel/Netgear Router we should start with. We are looking for the model with the best market penetration, but also is most representative of the direction Zyxel/Netgear are going in terms of market and logging capabilities. The Linksys advantage for ...

LinkLogger

I don't think you will find any that work quite like Link Logger but here are some suggestions.

Router Rooter - http://routerrooter.perceptron.com/
SNMPLog - http://www.marcsweb.com/mnweb_software.shtml
Kiwi Syslog Daemon - http://www.kiwi-enterprises.com/
SNMP Trap Watcher - http://www ...

LinkLogger

port 6346 is used for gnutella, Bearshare, Limewire, so its possible that whoever had that IP address before you (I'm assuming its not a staticly assigned IP address), used one of these file share programs. It should stop soon as the servers find out your not running one of these programs.

Blake

LinkLogger

Linksys has better logging software available for it

.

We are looking into doing a ZyXEL/NetGear version of Link Logger . No promises yet, but we are looking into it.

Blake

LinkLogger

A graph showing the Red Code effect available on http://members.home.net/mcneillb/

Red Code I woke up Aug 1 UTC, and started to scan away, then Aug 4 Red Code II arrived and port 80 scanning kicked into warp drive. Since August 7th we have been seeing a slowing in port 80 scans on our local ...

LinkLogger

Link Logger 1.2 released and available from http://www.LinkLogger.com.

Link Logger is a logging tool for Linksys BEF product line.

Thanks
Blake

LinkLogger

Snort runs on a number of systems, including Windows. Its a very worthy IDS and free to boot. Besides [url]http://www.snort.org,[/url] might I suggest that you visit [url]http://www.whitehats.com,[/url] which is another excellent source of Snort information. Also if you going to run Snort on any ...

LinkLogger

Enable logging on your Linksys and see which ports its trying to use. You might want to use something like Link Logger or Wallwatcher as both are much better then the Linksys native log viewer. Sorry I only know the url for Link Logger off the top of my head

http://www.LinkLogger.com

Blake

LinkLogger

In the interest of speed, hackers don't particularly care about what kind of box it is, just if it has an open port 111. Then they will figure out what kind of box it is, and possibly attack. The idea is to plow through as many IP addresses in the shortest amount of time possible. Checking OS type ...

LinkLogger

We are the authors of Link Logger ( http://www.LinkLogger.com ) for the Linksys routers and have been thinking about building a version for the NetGear product line (if possible).

Questions if I may be so bold as to ask. How many NetGears have been sold? Do all NetGear products have the same ...

LinkLogger

Its even worse then what TonyT posted. RPC.Stat has a well known validation problem in a number of Linux systems (Redhat, etc) which can allow a hacker root access. To read more about this see http://www.cert.org/advisories/CA-2000-17.html.

Blake

LinkLogger

The Linksys has the best logging software available

.....

LinkLogger

I enabled SPI, and I would recommend that other people should as well. NOTE that enabling SPI will stop any forwarded ports. So if you need port forwarding, do not enable SPI. Triggers still work correctly with SPI enabled.

Blake

LinkLogger

Sorry, I meant a sample of your zonealarm alarms.

LinkLogger

Could you give a sample??

LinkLogger

Are your forwarding ports to that machine or have it in the DMZ??

LinkLogger

Having run a honey pot project similar to Lance Spitzner's ( http://project.honeynet.org very good site to learn about advanced security, attack methods, detection, and plus Lance is just a dam good guy, etc). I can tell you that an unprotect Windows box with an open c:\ share will last no more then ...

LinkLogger

No, but they might try probing other ports since they know your there in order to find a chink in the amour. This isn't to say that stealth is any better, as they still might try probing other ports and see if one is available, but its more unlikely.

Originally posted by pewterdawg
even if a ...

LinkLogger

Cheap rule of thumb, if its inbound traffic with a non internal IP address as the destination IP, then its blocked. The nature of NAT is like a door with a handle only on the inside. Unless something from the inside opens the door, nothing from the outside can get in (simplified description of a NAT ...

LinkLogger

Looks OK. Personally I don't put a dummy IP address in my DMZ, but a lot of people do.

Originally posted by pewterdawg
do the other settings look ok?

LinkLogger

It should be OK to leave it as is.

Originally posted by pewterdawg
does the IP for router need to be changed from default?

LinkLogger

When watching Link Logger you are correct to pay attention to the destination IP address for Incoming traffic. In some cases you will see an internal IP address as the destination address. This case can arise if you have port forwarding set to pass inbound traffic on some port to some system on your ...

LinkLogger

Link Logger version 1.1.0.264 is available for download from our web site at http://www.linklogger.com. Link Logger is a Windows based logging tool for the Linksys BEF series of products (BEFSR41, BEFSR11, BEFSR81, etc).

New in Link Logger 1.1

- Printing/copying/exporting of reports and graphs ...

LinkLogger

70 is rather weak. Link Logger ( http://www.linklogger.com ) watches over 425 ports for known trojans and other 'evil' applications ranging from 'Death' on port 2 to 'RC' on port 65535. Link Logger is a logging tool which works with the Linksys BEF product line. Other firewall products will be ...

LinkLogger

If I had to pick one of the software firewalls, I'd be leaning towards Tiny right now. However given that you have a Linksys, you might want to try it with Link Logger ( http://www.linklogger.com ) as it will let you see your inbound/outbound traffic, alerts, alarms, do searches, reports, etc and ...

LinkLogger

SubSeven is not really a hack, its a RAT (Remote Access Trojan). What this person is doing is trolling for infected machines, ie where the SubSeven Server is already installed. SubSeven requires you to install the server (you usually don't know that you have installed it, hence the trojan name ...

LinkLogger

Binary Visions is pleased to announce that an update is available for Link Logger, the premier logging tool for Linksys Etherfast Cable / DSL Routers. The Link Logger version 1.0.0.262 update includes:

- Automatic resort of new traffic events. This feature can be turned off ('Setup...'->'User ...

LinkLogger

Rather standard fair right now unfortunately. You were a victim of the sadmind/IIS worm. Its just not a Microsoft problem. To learn more about this see
http://www.cert.org/advisories/CA-2001-11.html

Remember to apply your patches.

Blake www.LinkLogger.com

LinkLogger

Link Logger doesn't block traffic, but it does let you know about suspicious traffic (including in/out and traffic blocked at the Linksys) and gives you the ability to quickly analyze it. Link Logger watches over 425 known trojan or other attack ports and can raise various levels of alerts and since ...

LinkLogger

I use logging software with my Linksys. It shows me not only what is blocked by my Linksys, but what traffic is outbound as well and from what machine, etc. Alerts, Alarms, traffic history (both IP and Port), usage charts and reports, etc (Link Logger from [url=http://www.linklogger.com).]http://www ...

LinkLogger

One of the best honey pot sites is http://project.honeynet.org

LinkLogger

Linksys, because it has the best logging software available.

LinkLogger

Sorry I missed your post. If you rerun the install it should work. The problem is that Microsofts MDAC 2.6 lacks support for Jet, and hence the second driver. However sometimes the second driver will not install if the first driver isn't fully installed (after a reboot). So again to fix this problem ...

SG Broadband Community

Search found 41 matches

Link Logger and DShield.org

Link Logger for Prestige/Netgear Released

Link Logger 1.2 Released

Link Logger 1.1 available for Download

Link Logger update available