WALLWATCHER
Collect, View, and Analyze Router Logs

    WallWatcher runs under Microsoft Windows 98, NT, ME, 2000, XP, and Vista.  It collects, displays, and analyzes log information from more than 100 Routers and firewalls made by: 2Wire, 3Com, Actiontec, Adtran, Airlink, Asante, Astaro, Asus, Bewan, Billion, Bintec, Buffalo, Checkpoint, Cisco, Cyberguard, D-Link, Draytek, Edge-Core, Edimax, Fortigate, Fortinet, Gnatbox, Hotbrick, IPCop, IPTables, ITServ, Juniper Networks, Level One, Linksys, Lucent, m0n0wall, Netgear, Netscreen, OpenBSD, ParkerVision, pfSense, Servgate, SMC, Smoothwall, Sonicwall, Speedstream, Squid, Symantec, Trendnet, US Robotics, WatchGuard, Westell, Xincom, XroadsNetworks, Zoom, and ZyXEL(see details).  Many other routers use the same logging format as some of the listed ones, and WallWatcher can help you find the best fit.  For details, please see Adding support for other Routers, below.

HIGHLIGHTS

• provides filtering, immediate alerts, emailed alerts, historical analysis, summaries, and charts
• filters let you choose what data and time periods to log, display, analyze, and chart
• alerts offer real-time visual and audible signals of possible intrusion attempts
• historical analysis helps you find patterns of recent intrusion attempts
• summaries condense log histories for easier review
• user-selectable charts let you spot patterns of suspicious activities
• simple install / uninstall
• new users: download two ZIP files: WallWatcher and its library,
• extract their contents into a Folder of your choice, read the "Readme.Txt", run SETUP, and WallWatcher is ready to run
• NOTE: If SETUP cannot run (missing "VB dll file"), you will also need to install this component from Microsoft:

    http://download.microsoft.com/download/vb50pro/utility/1/win98/EN-US/Msvbvm50.exe
• VISTA: if SETUP cannot install everything automatically, the FAQ explain how to install them yourself.
• upgrades: download and unzip only WallWatcher; the Library only needs re-installation if you're upgrading from version 3.2.22 or earlier
• uninstall: run SETUP and choose "uninstall"
• complete HELP / documentation
• comprehensive Help with Contents, Index, and Search
• on-screen Instant Help when selecting options, for people who don't like to read documentation
• supports the DShield and myNetWatchman intrusion reporting systems
• minimizes to tray, not to taskbar, to reduce clutter
• can convert IP addresses to names (URLs) and vice versa
• plain text log file may be read by other programs while WALLWATCHER is running
• new log file begins each day at midnight
• can collect and report bandwidth usage (if router supports SNMP or includes packet lengths in log records)

SAMPLE SCREEN

SAMPLE CHART

SAMPLE BANDWIDTH SUMMARY

WALLWATCHER SUPPORTS THESE ROUTERS
    (and similar routers from the same manufacturers):
 

ADDING SUPPORT FOR OTHER ROUTERS

    WallWatcher supports most routers that send log records in real-time to a local computer port, usually 514 (SysLog) or 162 (SNMPTrap).  If your router can do that kind of logging, it's probably using a supported log format.  To find the best match, you can install WallWatcher and use the "auto-select" option on its ROUTER menu.  This one-time test may take an hour or two, depending on how much traffic your router reports.

    If there are no good matches, you can use WallWatcher's SPECIAL menu to "Capture" some log records that you can submit to routers@wallwatcher.com.  That sample will let the author try to add the necessary support for you.  (No promises, but user-supplied sample data was the basis for supporting most of the 125+ routers on this list.)  There is no charge for this, and the new support will become available to everyone.

    Note: if your router cannot send log records in real-time to a local computer, WallWatcher will not be able to support it.
 

PRICING

    WallWatcher is Shareware, not "Freeware"; but the current price is $0.00.  If the price changes in the future, it will not be retroactive and will not affect whatever version you've been using.
 

ADD-ON's

• GETLOG

can show you what Linksys BEF-series Routers logged while your computer was turned off (if the Router was still on).  Its documentation includes a link to download the program.  It has basic support for the BEFSR-series, extended support for the BEFSX41, BEFVP41, and user-contributed extended support for the WAG54G (Version 1).  GetLog does not support other categories or brands of routers.
 
• WW2DSHIELD

helps you submit log reports to DSHIELD.ORG.  Its documentation includes a link to download the program.

No Betas are available now.
 

PRIVACY POLICY and USAGE AGREEMENT

    The WallWatcher website doesn't collect any information about you.  It does count the number of times certain pages are accessed, but not by whom.  The web servers that host WallWatcher belong to various companies, not to me.  They collect IP addresses, timestamps, and usage statistics (which pages and files you transfer, and how many bytes are transferred).  They do that so they can bill me if the monthly bandwidth quota is exceeded.  Some of those hosts make those weblogs available to me to prove they're not overcharging.

    The programs at this website are not, and never have been, Spyware, Adware, Trojans, etc.  The only information they collect is the log and bandwidth data from the Router(s) you've asked them to monitor.  That information is stored in log files on your hard drive for your review and use.  WallWatcher does nothing else with any information unless you tell it to send information from those log files to the DShield.org or myNetWatchman Security Collection Centers, or to send logs or intrusion alerts to an e-mail address of your choice.  In those cases, the programs send the necessary information only to the location(s) you've specified.  Obviously, if you send me your logs for problem determination or to add support for your Router, you are sending me the information in those files.  (They're only used for development and testing, and go no further.)

    Selecting certain program features, especially conversion of remote IP addresses to Names (URL's), may send your IP address to those remote locations (that's how the Internet works).  You don't have to use those features, and WallWatcher's "Help" explains how you can safeguard your address.

NOTE:  From time to time, some Anti-virus and Spyware detectors have indicated "False positives" on some of the WallWatcher components.  For example, Symantec's 9/15/2004 virus definitions caused Norton Anti-Virus (NAV) to warn that "wallwatcher.exe" versions 3.0.1022 (July 16, 2004) through 3.0.1200 (August 5, 2004) were Spyware.  That was a false positive, and Symantec corrected it a week later: the 9/22/2004 virus definitions accepted "wallwatcher.exe".
 
 

USAGE AGREEMENT

    There are two restrictions to the use of the WallWatcher programs: 1) you may not sell them, and 2) they are provided as-is, with no warranty or liability on the part of the developer.
 

CONTACT INFORMATION

support@wallwatcher.com .  Please include the program name ("WallWatcher", "WW", "WRV", "GetLog", or "DShield") in the SUBJECT line to bypass the spam filters.