Firewall: 400 hits one day 0 the next?

[Gwailo]

I'm using BrickHouse to configure and manage OS X's firewall. I'm on a home LAN (SMC Barricade DSL router).

I have logging enabled so I can monitor 'net traffic. One day I'll get 450-or-so hits to my firewall; the next day (like today) I get a grand total of 0.

What's going on? Am I just really really lucky sometimes (anyone here study Chaos theory?) or is BrickHouse just not logging properly?

Any insight appreciated.

 

[hunt045]

I emailed Brian about the same problem and he graciously answered me back. Apparently he specs the counter conservatively at 500 hits. The log monitor quits after that. With the upcoming release he is going to set it at a higher number; like 50,000!!!

 

[scope]

I have an AirPort Base Station that acts as a hardware firewall. Before that, I used Brickhouse to configure my firewall. The only problem with AirPort is that I can't do ICMP things like traceroute, yet (hint, hint Apple).
/me crosses fingers and waits for the next base station firmware update

 

[rinse]

look in your logs... perhaps you are getting hits for the code red virus. that is what happens to me when I have more than 100+ hits in a day.

 

[hunt045]

I noticed last nite that the majority of the hits and rejections are from the Kaaza search engine. PC'rs looking for MP3 down loads. I am running the default filters using Brickhouse. 152 hits in little over an hour. With the shut down of AudioGalaxy and more people turning to the Gnutella network, I suspect this type of activity will be on the increase!