[c-nsp] Logging Server

Jeff Wojciechowski Jeff.Wojciechowski at midlandpaper.com
Tue Jul 13 11:00:49 EDT 2010


For just Neflow I would like to give Plixer's Scrutinizer a plug. They also have a syslog tool called LogAlot that I haven't tried out yet.

We just bought Scrutinizer and I can't imagine any other tool giving more detail without doing packet sniffing.

My understanding is that once we upgrade to IOS 15 on our routers that Netflow and NBAR will be integrated so instead of just  seeing device X is talking on port 80 to another device - NBAR can help determine what is traveling over port 80 (http or other) so we will have even more insight into our traffic.

Thanks,

-Jeff


-----Original Message-----
From: cisco-nsp-bounces at puck.nether.net [mailto:cisco-nsp-bounces at puck.nether.net] On Behalf Of Walter Keen
Sent: Tuesday, July 13, 2010 9:29 AM
To: Mohammad Khalil; cisco-nsp at puck.nether.net
Subject: Re: [c-nsp] Logging Server

Logging as in Syslog (ksyslogd), netflow (nfsen), or authentication/authorization for configuration (tacacs+ from shrubbery.net)

If anyone has suggestions other than the above, especially for netflow, I'd love to hear them.


-----Original Message-----
From: cisco-nsp-bounces at puck.nether.net on behalf of Mohammad Khalil
Sent: Tue 7/13/2010 6:55 AM
To: cisco-nsp at puck.nether.net
Subject: [c-nsp] Logging Server


Dears

what is the best free logging server to implement ?

_________________________________________________________________
Hotmail: Trusted email with powerful SPAM protection.
https://signup.live.com/signup.aspx?id=60969
_______________________________________________
cisco-nsp mailing list  cisco-nsp at puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/

_______________________________________________
cisco-nsp mailing list  cisco-nsp at puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/

This electronic mail (including any attachments) may contain information that is privileged, confidential, or otherwise protected from disclosure to anyone other than its intended recipient(s). Any dissemination or use of this electronic mail or its contents (including any attachments) by persons other than the intended recipient(s) is strictly prohibited. If you have received this message in error, please delete the original message in its entirety (including any attachments) and notify us immediately by reply email so that we may correct our internal records.  Midland Paper Company accepts no responsibility for any loss or damage from use of this electronic mail, including any damage resulting from a computer virus.



More information about the cisco-nsp mailing list