-- 1. I have not succesfully to date been able to get "My Net Watchman" (MNW) to properly process the "SHAW Secure" .log files [which pull right into notepad] ?
- See any intrusion activity: ???
2005-08-05T15:55:28-07:00,info,appl control,unknown,allow,receive,17,64.59.184.13,0
2005-08-05T15:55:28-07:00,info,dynamic rule,added,0.0.0.0,255.255.255.255,0,65535,445,445,allow 2005-08-05T15:55:24-07:00,info,appl control,C:\\Program Files\\Shaw Secure\\backweb\\3875767\\Program\\fspex.exe,deny,listen,17,0.0.0.0,9370 2005-08-05T15:55:24-07:00,info,appl control,services.exe,deny,send,17,68.150.171.255,138 2005-08-05T15:55:25-07:00,info,appl control,C:\\WINNT\\system32\\services.exe,deny,listen,17,0.0.0.0,0 2005-08-05T15:55:25-07:00,info,appl control,services.exe,deny,send,17,64.59.184.13,53 2005-08-05T15:55:25-07:00,info,appl control,services.exe,deny,send,17,64.59.184.13,53 2005-08-05T15:55:26-07:00,info,appl control,System,allow,send,17,68.150.171.255,138 2005-08-05T15:55:26-07:00,info,appl control,services.exe,deny,send,17,64.59.184.15,53 2005-08-05T15:55:26-07:00,info,appl control,services.exe,deny,send,17,64.59.184.15,53 2005-08-05T15:55:28-07:00,info,dynamic rule,added,0.0.0.0,255.255.255.255,0,65535,445,445,allow 2005-08-05T15:55:28-07:00,info,dynamic rule,added,0.0.0.0,255.255.255.255,0,65535,135,135,allow 2005-08-05T15:55:28-07:00,success,general,daemon,Firewall Daemon service started. 2005-08-05T15:55:31-07:00,info,dynamic rule,added,0.0.0.0,255.255.255.255,0,65535,58581,58581,allow 2005-08-05T15:55:31-07:00,info,appl control,C:\\WINNT\\system32\\services.exe,allow,send,17,64.59.184.15,53 2005-08-05T15:55:31-07:00,info,appl control,unknown,allow,send,17,68.150.171.255,138 2005-08-05T15:55:31-07:00,info,appl control,C:\\WINNT\\system32\\services.exe,allow,receive,17,68.150.170.45,138 2005-08-05T15:55:31-07:00,info,appl control,C:\\WINNT\\system32\\lsass.exe,allow,listen,17,68.150.170.45,500 2005-08-05T15:55:31-07:00,info,dynamic rule,added,0.0.0.0,255.255.255.255,0,65535,500,500,allow 2005-08-05T15:55:31-07:00,info,appl control,C:\\WINNT\\system32\\lsass.exe,allow,listen,17,68.150.170.45,4500 2005-08-05T15:55:31-07:00,info,dynamic rule,added,0.0.0.0,255.255.255.255,0,65535,4500,4500,allow 2005-08-05T15:55:33-07:00,info,appl control,C:\\WINNT\\system32\\services.exe,allow,send,17,64.59.184.13,53 2005-08-05T15:55:36-07:00,info,appl control,C:\\WINNT\\system32\\services.exe,allow,send,17,68.150.171.255,137 2005-08-05T15:55:36-07:00,info,appl control,C:\\WINNT\\system32\\services.exe,allow,receive,17,68.150.170.45,137 2005-08-05T15:55:37-07:00,info,appl control,,allow,send,17,68.150.171.255,137 2005-08-05T15:55:38-07:00,info,appl control,,allow,send,17,68.150.171.255,137 2005-08-05T15:55:39-07:00,info,appl control,,allow,send,17,68.150.171.255,137 2005-08-05T15:55:39-07:00,info,appl control,unknown,allow,connect out,0,0.0.0.0,0 2005-08-05T15:55:39-07:00,info,dynamic rule,added,0.0.0.0,255.255.255.255,0,65535,12032,12032,allow 2005-08-05T15:55:40-07:00,info,appl control,,allow,send,17,68.150.171.255,137 2005-08-05T15:55:41-07:00,info,appl control,,allow,send,17,68.150.171.255,137 2005-08-05T15:55:42-07:00,info,appl control,,allow,send,17,68.150.171.255,137 2005-08-05T15:55:42-07:00,info,appl control,C:\\WINNT\\system32\\services.exe,allow,send,17,68.150.171.255,138 2005-08-05T15:55:42-07:00,info,appl control,C:\\WINNT\\system32\\services.exe,allow,receive,17,68.150.170.45,138 2005-08-05T15:55:43-07:00,info,appl control,,allow,send,17,68.150.171.255,137 2005-08-05T15:55:44-07:00,info,appl control,,allow,send,17,68.150.171.255,137 2005-08-05T15:55:45-07:00,info,appl control,C:\\WINNT\\system32\\services.exe,allow,listen,17,0.0.0.0,0 2005-08-05T15:55:45-07:00,info,dynamic rule,added,0.0.0.0,255.255.255.255,0,65535,1029,1029,allow 2005-08-05T15:55:45-07:00,info,appl control,,allow,send,17,68.150.171.255,137 2005-08-05T15:55:46-07:00,info,appl control,,allow,send,17,68.150.171.255,137 2005-08-05T15:55:46-07:00,info,appl control,C:\\WINNT\\system32\\services.exe,allow,receive,17,68.150.170.45,137 2005-08-05T15:55:48-07:00,info,dynamic rule,removed,0.0.0.0,255.255.255.255,0,65535,1029,1029,allow 2005-08-05T15:55:53-07:00,success,general,daemon,Policy file has been reloaded. 2005-08-05T15:55:53-07:00,info,dynamic rule,removed,0.0.0.0,255.255.255.255,0,65535,58581,58581,allow 2005-08-05T15:55:53-07:00,info,dynamic rule,added,0.0.0.0,255.255.255.255,0,65535,58581,58581,allow 2005-08-05T15:55:54-07:00,info,appl control,C:\\WINNT\\system32\\services.exe,allow,receive,17,68.150.170.45,138 2005-08-05T15:55:55-07:00,info,appl control,C:\\WINNT\\system32\\services.exe,allow,listen,17,0.0.0.0,0 2005-08-05T15:55:55-07:00,info,dynamic rule,added,0.0.0.0,255.255.255.255,0,65535,1030,1030,allow 2005-08-05T15:55:55-07:00,info,appl control,C:\\WINNT\\system32\\services.exe,allow,receive,17,64.59.184.13,0 2005-08-05T15:55:55-07:00,info,dynamic rule,removed,0.0.0.0,255.255.255.255,0,65535,1030,1030,allow 2005-08-05T15:55:55-07:00,info,appl control,C:\\WINNT\\vsmom.exe,allow,connect out,6,140.112.217.129,889 2005-08-05T15:56:25-07:00,info,appl control,C:\\WINNT\\system32\\services.exe,allow,listen,17,0.0.0.0,0 2005-08-05T15:56:25-07:00,info,dynamic rule,added,0.0.0.0,255.255.255.255,0,65535,1032,1032,allow 2005-08-05T15:56:25-07:00,info,appl control,C:\\WINNT\\system32\\services.exe,allow,send,17,64.59.184.13,53 2005-08-05T15:56:25-07:00,info,appl control,C:\\WINNT\\system32\\services.exe,allow,receive,17,64.59.184.13,0 2005-08-05T15:56:25-07:00,info,dynamic rule,removed,0.0.0.0,255.255.255.255,0,65535,1032,1032,allow 2005-08-05T15:56:25-07:00,info,appl control,C:\\WINNT\\vsmom.exe,allow,connect out,6,65.17.240.160,889 2005-08-05T15:56:39-07:00,info,appl control,C:\\WINNT\\system32\\services.exe,allow,listen,17,0.0.0.0,0 2005-08-05T15:56:39-07:00,info,dynamic rule,added,0.0.0.0,255.255.255.255,0,65535,1034,1034,allow 2005-08-05T15:56:39-07:00,info,appl control,C:\\WINNT\\system32\\services.exe,allow,receive,17,64.59.184.13,0 2005-08-05T15:56:39-07:00,info,dynamic rule,removed,0.0.0.0,255.255.255.255,0,65535,1034,1034,allow 2005-08-05T15:56:39-07:00,info,appl control,C:\\WINNT\\vsmom.exe,allow,connect out,6,140.112.217.129,19899 2005-08-05T15:56:42-07:00,info,appl control,C:\\WINNT\\system32\\services.exe,allow,send,17,68.150.171.255,138 2005-08-05T15:56:42-07:00,info,appl control,C:\\WINNT\\system32\\services.exe,allow,receive,17,68.150.170.45,138 2005-08-05T15:56:48-07:00,info,dynamic rule,removed,0.0.0.0,255.255.255.255,0,65535,4500,4500,allow 2005-08-05T15:56:48-07:00,info,dynamic rule,removed,0.0.0.0,255.255.255.255,0,65535,500,500,allow 2005-08-05T15:56:48-07:00,info,appl control,unknown,allow,send,17,68.150.171.255,138 2005-08-05T15:56:48-07:00,info,appl control,unknown,allow,send,17,68.150.171.255,137 2005-08-05T15:56:48-07:00,info,appl control,C:\\WINNT\\system32\\services.exe,allow,receive,17,68.150.170.45,137 2005-08-05T15:59:04-07:00,info,appl control,unknown,allow,receive,17,68.150.170.45,138 2005-08-05T15:59:06-07:00,info,dynamic rule,added,0.0.0.0,255.255.255.255,0,65535,445,445,allow 2005-08-05T15:59:00-07:00,info,appl control,services.exe,allow,send,17,68.150.171.255,138 2005-08-05T15:59:01-07:00,info,appl control,System,allow,send,17,68.150.171.255,138 2005-08-05T15:59:03-07:00,info,appl control,System,allow,send,17,68.150.171.255,138 2005-08-05T15:59:04-07:00,info,appl control,System,allow,send,17,68.150.171.255,138 2005-08-05T15:59:04-07:00,info,appl control,C:\\WINNT\\system32\\lsass.exe,allow,listen,17,68.150.170.45,500 2005-08-05T15:59:04-07:00,info,appl control,C:\\WINNT\\system32\\lsass.exe,allow,listen,17,68.150.170.45,4500 2005-08-05T15:59:05-07:00,info,appl control,C:\\WINNT\\system32\\svchost.exe,deny,listen,6,0.0.0.0,135 2005-08-05T15:59:06-07:00,info,dynamic rule,added,0.0.0.0,255.255.255.255,0,65535,445,445,allow 2005-08-05T15:59:06-07:00,info,dynamic rule,added,0.0.0.0,255.255.255.255,0,65535,68,68,allow 2005-08-05T15:59:06-07:00,info,dynamic rule,added,0.0.0.0,255.255.255.255,0,65535,138,138,allow 2005-08-05T15:59:06-07:00,info,dynamic rule,added,0.0.0.0,255.255.255.255,0,65535,137,137,allow 2005-08-05T15:59:06-07:00,info,dynamic rule,added,0.0.0.0,255.255.255.255,0,65535,139,139,allow 2005-08-05T15:59:06-07:00,success,general,daemon,Firewall Daemon service started. 2005-08-05T15:59:06-07:00,info,dynamic rule,added,0.0.0.0,255.255.255.255,0,65535,58581,58581,allow 2005-08-05T15:59:06-07:00,info,appl control,C:\\WINNT\\system32\\svchost.exe,allow,listen,6,0.0.0.0,135 2005-08-05T15:59:06-07:00,info,appl control,C:\\WINNT\\system32\\services.exe,allow,listen,17,0.0.0.0,0 2005-08-05T15:59:06-07:00,info,dynamic rule,added,0.0.0.0,255.255.255.255,0,65535,135,135,allow 2005-08-05T15:59:06-07:00,info,dynamic rule,added,0.0.0.0,255.255.255.255,0,65535,1026,1026,allow 2005-08-05T15:59:06-07:00,info,appl control,C:\\WINNT\\system32\\services.exe,allow,listen,17,0.0.0.0,0 2005-08-05T15:59:06-07:00,info,dynamic rule,added,0.0.0.0,255.255.255.255,0,65535,1027,1027,allow 2005-08-05T15:59:06-07:00,info,appl control,C:\\WINNT\\system32\\services.exe,allow,send,17,64.59.184.13,53 2005-08-05T15:59:06-07:00,info,appl control,C:\\WINNT\\system32\\services.exe,allow,send,17,64.59.184.13,53 2005-08-05T15:59:06-07:00,info,appl control,C:\\WINNT\\system32\\services.exe,allow,receive,17,64.59.184.13,0 2005-08-05T15:59:06-07:00,info,dynamic rule,removed,0.0.0.0,255.255.255.255,0,65535,1026,1026,allow 2005-08-05T15:59:07-07:00,info,dynamic rule,added,0.0.0.0,255.255.255.255,0,65535,59591,59591,allow 2005-08-05T15:59:07-07:00,info,appl control,unknown,allow,send,17,68.150.171.255,138 2005-08-05T15:59:07-07:00,info,appl control,C:\\WINNT\\system32\\winlogon.exe,allow,send,17,68.150.171.255,137 2005-08-05T15:59:07-07:00,info,appl control,C:\\WINNT\\system32\\services.exe,allow,receive,17,68.150.170.45,137 2005-08-05T15:59:08-07:00,info,appl control,C:\\WINNT\\system32\\services.exe,allow,send,17,64.59.184.15,53 2005-08-05T15:59:08-07:00,info,appl control,C:\\WINNT\\system32\\services.exe,allow,receive,17,64.59.184.15,0 2005-08-05T15:59:08-07:00,info,appl control,,allow,send,17,68.150.171.255,137 2005-08-05T15:59:09-07:00,info,dynamic rule,removed,0.0.0.0,255.255.255.255,0,65535,1027,1027,allow 2005-08-05T15:59:09-07:00,info,appl control,C:\\WINNT\\vsmom.exe,allow,connect out,6,161.58.176.169,19899 2005-08-05T15:59:10-07:00,info,appl control,C:\\WINNT\\system32\\services.exe,allow,send,17,68.150.171.255,137 2005-08-05T15:59:10-07:00,info,appl control,C:\\WINNT\\system32\\services.exe,allow,listen,17,0.0.0.0,0 2005-08-05T15:59:10-07:00,info,dynamic rule,added,0.0.0.0,255.255.255.255,0,65535,1029,1029,allow 2005-08-05T15:59:10-07:00,info,dynamic rule,removed,0.0.0.0,255.255.255.255,0,65535,1029,1029,allow 2005-08-05T15:59:10-07:00,info,appl control,C:\\WINNT\\vsmom.exe,allow,connect out,6,61.121.100.107,80 2005-08-05T15:59:10-07:00,info,appl control,C:\\WINNT\\vsmom.exe,allow,connect out,6,61.121.100.107,80 2005-08-05T15:59:10-07:00,info,appl control,,allow,send,17,68.150.171.255,137 2005-08-05T15:59:11-07:00,info,appl control,,allow,send,17,68.150.171.255,137 2005-08-05T15:59:12-07:00,info,appl control,,allow,send,17,68.150.171.255,137 2005-08-05T15:59:13-07:00,info,appl control,,allow,send,17,68.150.171.255,137 2005-08-05T15:59:14-07:00,info,appl control,,allow,send,17,68.150.171.255,137 2005-08-05T15:59:15-07:00,info,appl control,,allow,send,17,68.150.171.255,137 2005-08-05T15:59:15-07:00,info,appl control,C:\\WINNT\\vsmom.exe,allow,connect out,6,61.121.100.107,80 2005-08-05T15:59:16-07:00,info,appl control,C:\\WINNT\\system32\\services.exe,allow,send,17,68.150.171.255,138 2005-08-05T15:59:16-07:00,info,appl control,C:\\WINNT\\system32\\services.exe,allow,receive,17,68.150.170.45,138 2005-08-05T15:59:16-07:00,info,appl control,,allow,send,17,68.150.171.255,137 2005-08-05T15:59:17-07:00,info,appl control,,allow,send,17,68.150.171.255,137 2005-08-05T15:59:17-07:00,info,appl control,C:\\WINNT\\system32\\services.exe,allow,receive,17,68.150.170.45,137 2005-08-05T15:59:18-07:00,info,appl control,C:\\WINNT\\vsmom.exe,allow,listen,6,0.0.0.0,22286 2005-08-05T15:59:18-07:00,info,dynamic rule,added,0.0.0.0,255.255.255.255,0,65535,22286,22286,allow 2005-08-05T15:59:18-07:00,info,appl control,C:\\WINNT\\vsmom.exe,allow,connect out,6,68.150.219.18,135 2005-08-05T15:59:18-07:00,info,appl control,C:\\WINNT\\vsmom.exe,allow,connect out,6,68.150.218.251,135 2005-08-05T15:59:18-07:00,info,appl control,C:\\WINNT\\vsmom.exe,allow,connect out,6,68.150.63.140,135 2005-08-05T15:59:18-07:00,info,appl control,C:\\WINNT\\vsmom.exe,allow,connect out,6,68.150.168.25,135 2005-08-05T15:59:18-07:00,info,appl control,C:\\WINNT\\vsmom.exe,allow,connect out,6,68.150.13.171,135 2005-08-05T15:59:18-07:00,info,appl control,C:\\WINNT\\vsmom.exe,allow,connect out,6,68.150.159.118,135 2005-08-05T15:59:18-07:00,info,appl control,C:\\WINNT\\vsmom.exe,allow,connect out,6,68.150.114.60,135 2005-08-05T15:59:18-07:00,info,appl control,C:\\WINNT\\vsmom.exe,allow,connect out,6,68.150.216.204,135 2005-08-05T15:59:18-07:00,info,appl control,C:\\WINNT\\vsmom.exe,allow,connect out,6,68.150.64.90,135 2005-08-05T15:59:18-07:00,info,appl control,C:\\WINNT\\vsmom.exe,allow,connect out,6,68.150.165.235,135 2005-08-05T15:59:18-07:00,info,appl control,C:\\WINNT\\vsmom.exe,allow,connect out,6,68.150.11.124,135 2005-08-05T15:59:18-07:00,info,appl control,C:\\WINNT\\vsmom.exe,allow,connect out,6,68.150.7.4,135 2005-08-05T15:59:18-07:00,info,appl control,C:\\WINNT\\vsmom.exe,allow,connect out,6,68.150.112.13,135 2005-08-05T15:59:18-07:00,info,appl control,C:\\WINNT\\vsmom.exe,allow,connect out,6,68.150.216.154,135 2005-08-05T15:59:18-07:00,info,appl control,C:\\WINNT\\vsmom.exe,allow,connect out,6,68.150.62.44,135 2005-08-05T15:59:18-07:00,info,appl control,C:\\WINNT\\vsmom.exe,allow,connect out,6,68.150.163.188,135 2005-08-05T15:59:18-07:00,info,appl control,C:\\WINNT\\vsmom.exe,allow,connect out,6,68.150.8.78,135 2005-08-05T15:59:18-07:00,info,appl control,C:\\WINNT\\vsmom.exe,allow,connect out,6,68.150.113.219,135regards......'Ole
----------------------------------------------------------- "Power always thinks it has a great soul and vast views beyond the comprehension of the weak; and that it is doing God's service when it is violating all His laws. Our passions...possess so much metaphysical subtlety and so much overpowering eloquence that they insinuate themselves into the understanding and the conscience and convert both to their party." --JOHN ADAMS