[RE: [[nsp] PIX log analysis]]

[Christopher McCrory]

Hello...


On Fri, 2003-04-25 at 12:09, Ed Ravin wrote:
> On Fri, Apr 25, 2003 at 02:52:45PM -0400, Joshua Sahala wrote:
> > kiwi was pretty easy, but all of the cool features only came in the 
> > pay-to-play copy :(
> > 
> > for all of my cisco hardware, i define a facility number then point
> > it at my syslog box (solaris2.6 with the standard syslog daemon).
> 
> I don't think that will work with a PIX - don't they require a syslog
> server that will accept messages via TCP?  You'd need syslog-ng for
> that.

Nope, udp syslog works well.  syslog via tcp is an option but not a
requirement.


> _______________________________________________
> cisco-nsp mailing list  cisco-nsp at puck.nether.net
> http://puck.nether.net/mailman/listinfo/cisco-nsp
> archive at http://puck.nether.net/pipermail/cisco-nsp/
-- 
Christopher McCrory
 "The guy that keeps the servers running"
 
chrismcc at pricegrabber.com
 http://www.pricegrabber.com
 
Let's face it, there's no Hollow Earth, no robots, and
no 'mute rays.' And even if there were, waxed paper is
no defense.  I tried it.  Only tinfoil works.