Good morning sangeetha,
It depends on the vendor. With Cisco ios routers can act like
firewalls or routers and you can choose what you want to log. From the
level of logging (0, emergencies-7, debugging) and then also
access-lists, firewall alerts (max threshold of half open tcp conns
ect). Cisco's pix is a different animal, it is just a firewall and will
give you very different output as the kernel is not an ios kernel. *nix
can be used as a firewall or a router and again you can set logging
prameters in /etc/syslog.conf, since it is *nix the logging will be in
the format the OS uses. All the vendors provide similar information, in
a nutshell fw syslog will contain attempted passage or access, or many
common attacks, routers will log nothing by default but can be
configured to log all the same things as most firewalls. I hope that
helps.
Wade B
sangeetha Rao wrote:
>
> Hi,
> I'm doing a survey on deception systems.They are supposed to use only
> firewall data. I wanted to know what is the difference between the logging
> information stored in routers and those in a firewall. I thought firewall
> was also a kind of router. Practiclly in what do the contents differ?, since
> I haven't seen one.
>
> Thanks
> sangeetha
>
> _________________________________________________________________
> Get your FREE download of MSN Explorer at http://explorer.msn.com/intl.asp.
>
> _______________________________________________
> Firewalls mailing list
> [EMAIL PROTECTED]
> http://lists.gnac.net/mailman/listinfo/firewalls
--
Wade Blackwell
Washington Mutual Bank
[EMAIL PROTECTED]
Network Security Architect
Aol & Yahoo instant messenger csewadeb
Calendar http://calendar.yahoo.com/csewadeb
(D)206.377.7426 (C)206.930.1822 (F)206.490.6797
smime.p7s
Description: S/MIME Cryptographic Signature
