*********** REPLY SEPARATOR  ***********

On 5/30/2003 at 10:43 PM Tony wrote, in part:

>...I want to expand weblet a little...

>...What I want to do is, add the functionality of the IP address screen to
the port screen...

>On the IP screen, the addresses are clickable to view the actual hits the IP
>was associated with.  What I would like to do is have the ports be clickable
>to view a sorted list of IP addresses.  So if I clicked port 53, I could get
>a listing of all the IP's who hit that port.  I could then get the offending
>IP's without having to plow through the current IP list to see who hit what
>port.
>
>Did I describe that clearly enough?

Made sense to me. :o)  I'd like to have that functionality too, and I hope if
you make such changes you'll share them with the rest of us.  Sometimes I want
to sanity-check that ONE hit on my FTP port amidst the hundreds of pings and
Windows file-sharing probes and backdoor tests.

Thing is though, you don't have to "plow through the current IP list" even
now.  If there are certain port hits that concern you on the port screen, make
a note of them, then flip over to the "0" firewall log and use your browser's
search function.  You can very quickly step through all the hits on that
specific port in that particular log.

Not saying that what you're suggesting is not worthwhile; I want it and would
use it, for sure.  Just pointing out there IS a possibly easier way to get at
the data than what you're currently doing.

Cheers,
James




-------------------------------------------------------
This SF.net email is sponsored by: eBay
Get office equipment for less on eBay!
http://adfarm.mediaplex.com/ad/ck/711-11697-6916-5
------------------------------------------------------------------------
leaf-user mailing list: [EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/leaf-user
SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html

Reply via email to