Passive Syslog Monitor
"Ron A. Dilley" <[email protected]> Fri, 25 Jan 2008 13:06:47 -0800
| Newsgroups | gmane.comp.sysutils.loganalysis |
|---|---|
| Message-ID | <[email protected]> |
<blatant self promotion> List, I have just posted an update to the Passive Syslog Monitoring Daemon (http://sourceforge.net/projects/psmd). Included are tons of bug fixes and a few interesting new features: TCP reassembly of syslog over TCP with logging of lost log data (due to packet loss) TIMEMARK messages to record TZ and clock skew issues Previous interesting features: Passive syslog monitoring (no listening port required) Time on wire (with year!), Src & Dst MAC and IP address logging MD5/SHA1 hashing of log data archived to disk UDP Forwarding of logs with or without forged source IP Ron </blatant self promotion>