NET-WALL
Sawmill is a Net-Wall log analyzer (it also supports the 1021 other log formats listed to the left).
It can process log files
in Net-Wall format, and generate dynamic statistics from them,
analyzing and reporting events.
Sawmill can parse Net-Wall logs, import them into a MySQL, Microsoft SQL Server, or Oracle database (or its own built-in database),
aggregate them, and generate dynamically filtered reports, all through a web interface.
Sawmill can perform Net-Wall log analysis on any platform, including Windows, Linux, FreeBSD, OpenBSD, Mac OS, Solaris, other UNIX, and others.
Sawmill stores the following non-numerical fields in its database for Net-Wall, generates reports for each field, and allows dynamic filtering on any combination of these fields:
| Field | | Internal Name |
| date/time | | date_time |
| day of week | | day_of_week |
| hour of day | | hour_of_day |
| host | | host |
| type | | type |
| LVLl | | lvl |
| program | | prog |
| rule | | rule |
| protocol | | proto |
| action | | action |
| source IP | | src_ip |
| source | | src |
| source port | | src_port |
| destination IP | | dst_ip |
| destination | | dst |
| destination port | | dst_port |
| service | | service |
| I type | | itype |
| side in | | side_in |
| side out | | side_out |
| side exp | | side_exp |
| connection state | | cnx_state |
| level info | | lvl_info |
| acknowledged bytes in | | ibyte_ack |
| acknowledged packets in | | ipacket_ack |
Sawmill stores the following numerical fields in its database for Net-Wall, aggregating them and including them as columns in most reports:
| Numerical Field | | Internal Name |
| accesses | | accesses |
| visitors | | visitors |
| bytes | | bytes |
See Sawmill Features to learn more about Sawmill's options for viewing, customizing, filtering, exporting and scheduling Net-Wall reports.
Sawmill also supports 1021 other log formats.