WatchGuard Firebox II and ICQ See the end of the digest for information on subscribing to the Firewalls or Firewalls-Digest mailing lists and on how to retrieve back issues.
Logs Look up the man page for syslogd.
You will find that your devices such as routers, firewalls, etc. will have a setting where you tell it to send log info to a machine. Now you have one place where all your log info resides even though a hacker might delete the logs on the main machine. Further it can be expanded to handle writing them to tape. You can break out other messages based on their source to separate files but ipchain messages are kernel messages and they are simply grouped together with all other kernel messages. BUT the cronjob that hangles emailing, etc.