PixParser v1.0 - Pix Log Parsing
Copyright (C) 2006  Bryan Dew

This program is free software; you can redistribute it and/or
modify it under the terms of the GNU General Public License
as published by the Free Software Foundation; either version 2
of the License, or (at your option) any later version.

This program is distributed in the hope that it will be useful,
but WITHOUT ANY WARRANTY; without even the implied warranty of
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
GNU General Public License for more details.

You should have received a copy of the GNU General Public License
along with this program; if not, write to the Free Software
Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA  02110-1301, USA.

***PixParser v1.0**********************************
* Build Date: 12/5/06 (Shareware Version)
* Written by: Bryan Dew (bryan@freakscomputers.com)
* Documentation Updated: 12/5/06
***************************************************

About PixParser
---------------
PixParser is a program that can be used to parse Cisco Pix log files to find any search term specified.  It will build an html file, currently called report.html, with your search results presented. It does a reverse lookup on all IPs, so that you don't have to manually figure out where people have gone via the Internet.  The search/dns lookup will take quite a while.  The larger the log file, the longer the search.  In future versions we hope to increase the file read and file output times, as well as the DNS reverse lookup.

Requirements
------------
For this version of PixParser to work, please make sure you have/do the following:

* Windows OS (untested on Linux, may run fine)
* Logging must be Enabled/On (this is more than obvious) on your Pix
* Trap Logging should be set to "notifications" (Level 5) on your Pix
* PixParser.exe should be in the same directory as the log file(s).

Usage
-----
Use PixParser at the command prompt, by typing in PixParser.  It will present you with questions regarding the log file name, search term, and if you would like to "Trim" the results.  When you trim the results, it will cut off the excess URL data.  So instead of a 200 character URL (www.google.com?search.cgi&y123&133%ttha23), you will get the base URL, such as www.google.com.

You can also use the following switches to avoid typing in the data all of the time.  Great for batch files or Scheduled Task(s) to run your parse!

-f "Log file name, such as 103106.log"
-s "Search term, such as www.yahoo.com, userid1, or 127.0.0.1"
-t "Trim, Valid response is 1 or 2.  1 = Yes, 2 = No"


Future Updates Planned
----------------------
* Ability to specify Logging Level in the program to allow for various pix log types.
* Tested Linux Version.
* Increase the File Read/Write times.
* Increase the DNS Reverse lookup times.
* Ability to name the .html file
* Ability to read log files in other directory's and drives

Support
-------
I will answer any questions, suggestions, and/or concerns at my email address. (bryan@freakscomputers.com)
