Passive Syslog Monitor

"Ron A. Dilley" <[email protected]> Fri, 25 Jan 2008 13:06:47 -0800
Newsgroups gmane.comp.sysutils.loganalysis
Message-ID <[email protected]>
<blatant self promotion>

List,

I have just posted an update to the Passive Syslog Monitoring Daemon 
(http://sourceforge.net/projects/psmd).

Included are tons of bug fixes and a few interesting new features:

TCP reassembly of syslog over TCP with logging of lost log data (due to 
packet loss)
TIMEMARK messages to record TZ and clock skew issues

Previous interesting features:

Passive syslog monitoring (no listening port required)
Time on wire (with year!), Src & Dst MAC and IP address logging
MD5/SHA1 hashing of log data archived to disk
UDP Forwarding of logs with or without forged source IP

Ron

</blatant self promotion>