Need script to show a count on Rule Hits

[slwiley]

Im doing an audit of a rulebase and I'd like to run a script against the logs to see what rules are being used so I can clean up the unused rules and optimize the rulebase order. Does anyone have anything that will do this? I found a script on the web but it used perl, and I dont have that installed on my Nokia. Thanks for the help!

[kva.kva]

There is such script for CP support only. Also Reporter can create report with such data.
Also you can create your own script, which parses connections tables on module.

Does anybody know 3'rd party script may be? It will be very interesting tool.

[northlandboy]

Couple of options I can think of:

* If this is a one-off, then do an fw logexport to convert the logfiles to text, then write a quick and dirty shell/awk or perl script to parse it. Would be all of about 10 lines, if that. Remember that the processing doesn't have to be done on the firewall. Just transfer the logs to a Linux box and run the perl script there

* If you've got the money, and want to do this on an ongoing basis, tools like Firemon can do the job pretty well.