The Sound of Your Firewall

upside writes "It had to be done. Once The Spinning Cube of Potential Doom gave us a 3D visualization of a firewall, someone was bound to ask themselves 'What does your firewall sound like?'."

Comments

Anthem / Midi?

[CommanderData]

I really like these concepts for alternate ways to visualize large amounts of data. Reminds me of Douglas Adam's Dirk Gently books. There was a character who wrote a program called Anthem that would interpret a company's stock data and vital statistics and play a tune based on that data.

Rather than using a Wav. file, maybe this could be written to play a variety MIDI tones to account for all kinds of activity on your network!

I did that.

[digitalsushi]

I've been doing exactly this same thing for a while. I found that it got extrememly obnoxious, so I dumbed mine down to just play a wave file whenever I get pinged by someone pinging me from a command line ping. I don't know why the length is different than the crap pings that come in every 8 or 9 seconds, but with this swatch definition below, it seems to trigger only when I am pinged by hand.

So, put this in your swatch file that watches your firewall log:

watchfor /firewall-ping.*LEN=84/
exec "/usr/local/site/bin/ping-wave.sh ping.wav"

That script just locks the darned thing so it doesnt pop and crack if i get pinged twice:

ping-wave.sh:
if `grep OPEN /etc/pingwatch.lock 1>/dev/null`
then (echo -n > /etc/pingwatch.lock) && (/usr/bin/play /usr/local/site/etc/soun
ds/$1) && (echo OPEN > /etc/pingwatch.lock)
fi

And here's a link to my ping wave for you to use:

ping .wav

I also used the naturalvoices website to make a nerdy computer lady announcing new entries in my arp table. You can grab wave file too if you want. Here's the script I have for that:

put this in your /etc/crontab or whatever:

0-59 * * * * root /usr/local/site/bin/arp-watch

and then make the above command contain this:

#!/bin/bash

for each in `arp -n |grep -v "Address"|grep -v "eth0"|awk '{print $3}'`
do
if grep $each /etc/arptable 1>/dev/null
then :
else /usr/bin/play /usr/local/site/etc/sounds/new.arp.entry.wav && echo $each >> /etc/arptable
fi
done

if anyone can improve upon my bash, please, i have no ego. :D

Re:I did that.

[AndroidCat]

I was curious about all the Sasser mutants and such trying to hit my port 445, so I whipped up a program to open the port and see if they were trying to say anything. (Boring, they want my end to say something first.) I used the text-to-speech to have it say "Poink!" when it opened the port and "Splat!" when it closed. When a few hit at the same time, it's "Poink! Poink! Poink! Splat! Splat! Splat!". Almost as entertaining as having a few beers out back listening to the bug-zapper. (It would be better if my end sent a buffer-overflow to crash attempted attacks, but too much work.)