The ftprpt program reads the system log and produces reports showing how ftp is being used. The genproxsum program reads the system log and produces reports showing how the general proxy program is being used. The tnprpt program reads the system log and produces reports showing how telnet is being used. Parameters are available to control the amount of detail reported. The httpsum program reads the http log and produces reports showing how http is being used.
Parameters are available to control the amount of detail reported.
This information is stored in a UNIX binary file. The last command will tell you who logged in, from what IP address, and how long they were on. If you allow users to login to the firewall they are given restricted shells that do not allow them to access the syslog . If they are using proxies then they are not logged on to the firewall and can not access the log. Thus, logging is secured to provide reliable data even after a break in.