Snort mailing list archives
Re: syslog from a router
From: Doug Burks <doug.burks () gmail com>
Date: Thu, 8 Nov 2012 13:30:06 -0500
Security Onion can receive syslog in a few different ways depending on how you configure it: - OSSEC can receive syslog and the ossec_agent for Sguil will insert OSSEC alerts into the Sguil database to be viewed with the Sguil console - syslog-ng can accept syslog and send it into the ELSA database which can be viewed using ELSA's web interface. For more information about Security Onion, please see: http://securityonion.blogspot.com/ Thanks, Doug On Thu, Nov 8, 2012 at 1:07 PM, Jeremy Hoel <jthoel () gmail com> wrote:
There was a plugin/agent for sguil that could send syslog events to the console, but I forget what it is. I believe it is installed with SecurityOnion though.. that and the httppry tool. On Thu, Nov 8, 2012 at 5:39 PM, Mitesh Jadia <mitesh.jadia () gmail com> wrote:No snort does not process any logs. On 08-Nov-2012, at 10:37 PM, Balasubramaniam Natarajan <bala150985 () gmail com> wrote: Hi Snort needs the sniff the traffic to process them I don't think snortcanprocess the syslog messages being forwarded to it from the router. I believe what you need is SPLUNK's activity. On Thu, Nov 8, 2012 at 10:02 PM, Leonardo Pezente <lmpezente () gmail com> wrote:I want to send some logs from some routers to snort, but im not sure ifhecan process this logs. Is that possible?------------------------------------------------------------------------------Everyone hates slow websites. So do we. Make your web apps faster with AppDynamics Download AppDynamics Lite for free today: http://p.sf.net/sfu/appdyn_d2d_nov _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users Please visit http://blog.snort.org to stay current on all the latestSnortnews!-- Regards, Balasubramaniam Natarajan www.etutorshop.com/moodle/------------------------------------------------------------------------------Everyone hates slow websites. So do we. Make your web apps faster with AppDynamics Download AppDynamics Lite for free today: http://p.sf.net/sfu/appdyn_d2d_nov _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users Please visit http://blog.snort.org to stay current on all the latestSnortnews!------------------------------------------------------------------------------Everyone hates slow websites. So do we. Make your web apps faster with AppDynamics Download AppDynamics Lite for free today: http://p.sf.net/sfu/appdyn_d2d_nov _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users Please visit http://blog.snort.org to stay current on all the latestSnortnews!------------------------------------------------------------------------------ Everyone hates slow websites. So do we. Make your web apps faster with AppDynamics Download AppDynamics Lite for free today: http://p.sf.net/sfu/appdyn_d2d_nov _______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users Please visit http://blog.snort.org to stay current on all the latest Snort news!
-- Doug Burks http://securityonion.blogspot.com
------------------------------------------------------------------------------ Everyone hates slow websites. So do we. Make your web apps faster with AppDynamics Download AppDynamics Lite for free today: http://p.sf.net/sfu/appdyn_d2d_nov
_______________________________________________ Snort-users mailing list Snort-users () lists sourceforge net Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive: http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users Please visit http://blog.snort.org to stay current on all the latest Snort news!
Current thread:
- syslog from a router Leonardo Pezente (Nov 08)
- Re: syslog from a router Balasubramaniam Natarajan (Nov 08)
- Re: syslog from a router Mitesh Jadia (Nov 08)
- Re: syslog from a router Jeremy Hoel (Nov 08)
- Re: syslog from a router Doug Burks (Nov 08)
- Re: syslog from a router Mitesh Jadia (Nov 08)
- Re: syslog from a router Balasubramaniam Natarajan (Nov 08)