WALLWATCHER
Collect, View, and Analyze Router Logs

    WallWatcher runs under all versions of Microsoft Windows released between 1998 and 2010, including Windows 7, VISTA, XP, 2000, ME, NT, and 98.

    It collects, displays, and analyzes log information from more than 135 Routers and firewalls made by: 2Wire, 3Com, Actiontec, Adtran, Airlink, Asante, Astaro, Asus, Bewan, Billion, Bintec, Buffalo, Checkpoint, Cisco, Cyberguard, D-Link, Draytek, Edge-Core, Edimax, Fortigate, Fortinet, Gnatbox, Hotbrick, IPCop, IPTables, ITServ, Juniper Networks, Level One, Linksys, Lucent, m0n0wall, Netgear, Netscreen, OpenBSD, ParkerVision, pfSense, Servgate, SMC, Smoothwall, Sonicwall, Speedstream, Squid, Symantec, Trendnet, Untangle, US Robotics, WatchGuard, Westell, Xincom, XroadsNetworks, Zoom, and ZyXEL(see details).  Many other routers use the same logging format as some of the listed ones, and WallWatcher can help you find the best fit.  For details, please see Router Selection, below.

HIGHLIGHTS

• provides filtering, immediate alerts, emailed alerts, historical analysis, summaries, and charts
• filters let you choose what data and time periods to log, display, analyze, and chart
• alerts offer real-time visual and audible signals of possible intrusion attempts
• historical analysis helps you find patterns of recent intrusion attempts
• summaries condense log histories for easier review
• user-selectable charts let you spot patterns of suspicious activities
• simple install / uninstall
• new users: download two ZIP files: WallWatcher and its library,
• extract their contents into a Folder of your choice, read the "Readme.Txt", run SETUP, and WallWatcher is ready to run
• NOTE: If SETUP cannot run (missing "VB dll file"), you will also need to install this component from Microsoft:

    http://download.microsoft.com/download/vb50pro/utility/1/win98/EN-US/Msvbvm50.exe
• VISTA, WINDOWS 7:  if SETUP cannot install everything automatically, the FAQ explain how to install them yourself.
• upgrades: download and unzip only WallWatcher, then restart WallWatcher. There's no need to re-run SETUP or to update the "Library."
• uninstall: run SETUP and choose "uninstall"
• complete HELP / documentation
• comprehensive Help with Contents, Index, and Search
• on-screen Instant Help when selecting options, for people who don't like to read documentation
• on-line FAQ contain additional suggestions for installing and using WallWatcher
• supports the DShield and myNetWatchman intrusion reporting systems
• minimizes to tray, not to taskbar, to reduce clutter
• can convert IP addresses to names (URLs) and vice versa
• plain text log file may be read by other programs while WALLWATCHER is running
• new log file begins each day at midnight
• can collect and report bandwidth usage (if router supports SNMP or includes packet lengths in log records)

SAMPLE SCREEN

SAMPLE CHART

SAMPLE BANDWIDTH SUMMARY

WALLWATCHER SUPPORTS THESE ROUTERS
    (and similar routers from the same manufacturers; if your router isn't listed, please see "My router isn't on the ROUTER list.  What should I do?" in the FAQ):
 

ROUTER SELECTION

    WallWatcher supports most routers that send log records in real-time to a local computer port, usually 514 (SysLog) or 162 (SNMPTrap).  If your router can do that kind of logging, it's probably using a supported log format.  To find the best match, you can install WallWatcher and use the "auto-select" option on its ROUTER menu.  This one-time test may take an hour or two, depending on how much traffic your router reports.

    NOTE: if your router cannot send log records in real-time to a local computer, WallWatcher will not be able to support it.
 

PRICING

    WallWatcher is Shareware, not "Freeware"; but the current price is $0.00.
 

ADD-ON's

• GETLOG

can show you what Linksys BEF-series Routers logged while your computer was turned off (if the Router was still on).  Its documentation includes a link to download the program.  It has basic support for the BEFSR-series, extended support for the BEFSX41, BEFVP41, and user-contributed extended support for the WAG54G (Version 1).  GetLog does not support other categories or brands of routers.
 
• WW2DSHIELD

helps you submit log reports to DSHIELD.ORG.  Its documentation includes a link to download the program.

    The WallWatcher website doesn't collect any information about you.  It does count the number of times certain pages are accessed, but not by whom.  The web servers that host WallWatcher belong to various companies, not to me.  They collect IP addresses, timestamps, and usage statistics (which pages and files you transfer, and how many bytes are transferred).  They do that so they can bill me if the monthly bandwidth quota is exceeded.  Some of those hosts make those weblogs available to me to prove they're not overcharging.

    The programs at this website are not, and never have been, Spyware, Adware, Trojans, etc.  The only information they collect is the log and bandwidth data from the Router(s) you've asked them to monitor.  That information is stored in log files on your hard drive for your review and use.  WallWatcher does nothing else with any information unless you tell it to send information from those log files to the DShield.org or myNetWatchman Security Collection Centers, or to send logs or intrusion alerts to an e-mail address of your choice.  In those cases, the programs send the necessary information only to the location(s) you've specified.

    Selecting certain program features, especially conversion of remote IP addresses to Names (URL's), may send your IP address to those remote locations (that's how the Internet works).  You don't have to use those features, and WallWatcher's "Help" explains how you can safeguard your address.

NOTE:  From time to time, some Anti-virus and Spyware detectors have indicated "False positives" on some of the WallWatcher components.  For example, Symantec's 9/15/2004 virus definitions caused Norton Anti-Virus (NAV) to warn that "wallwatcher.exe" versions 3.0.1022 (July 16, 2004) through 3.0.1200 (August 5, 2004) were Spyware.  That was a false positive, and Symantec corrected it a week later: the 9/22/2004 virus definitions accepted "wallwatcher.exe".
 
 

USAGE AGREEMENT

    There are two restrictions to the use of the WallWatcher programs: 1) you may not sell them, and 2) they are provided as-is, with no warranty or liability on the part of the developer.