Figuring out how to parse your firewall logs is not always easy. This blogpost shows you some useful log-parsing techniques. For the examples, I use the logs of the Zorp proxy firewall, developed now by Balasys, the Hungarian distributor of Balabit products.

Making sense of Zorp firewall logs using syslog-ng @ Czanik@BalaBit