1600 Series and Linux syslog

[sproosy]

Hi i have a 1600 series router and have a centralised Linux box looking after all my syslogs. What do i need to do to send the routers logs to a linux box. Also the router is connected to a linux box running IPTABLES. What ports will i need to enable to allow the syslog data to pass throught? port 514 is that it?

Cheeers!

Sproosy MCP

Keep it real!

 

[l1carter]

easy,

on the cisco router

set your logging level to what ever you want to see then,

logging host x.x.x.x <<<--- your IP of your linux box.

 

[rcasta]

BTW, what is needed on the Linux box for making this possible? Is syslogging an already installed packet into any linux box?

 

[sproosy]

Cheers debugall.

rcasta syslog is on all linux machines. Check /etc/sysconifg/syslog or /etc/syslog.conf. Also try man syslog.



Sproosy MCP

Keep it real!

 

[tuks]

I need help on configuring SYSLOG

Cleaners routinely destroy web sites

 

[wybnormal]

I wrote the chapter in Syngress &quot;Cisco Security Specialist Guide to Cisco PIX Firewall&quot; that covered Syslog and setting up Linux as a syslog server. Find a copy in your local book store and take a look since we hit it in detail. You can find the same info scattered throughout the web in various places and even on Cisco's own site although it's a bit of tough read from there. It can be as simple as you want or you get complex by re-routing each device to it's own log file on the 'nux box by using facilities.

Here is a link from Redhat:

http://www.redhat.com/docs/manuals/...anual/cluster-manager/s1-software-syslog.html

And a second one:

http://www.siliconvalleyccie.com/linux-hn/logging.htm

MikeS


Find me at

http://www.packetattack.com

&quot;Take advantage of the enemy's unreadiness, make your way by unexpected routes, and attack unguarded spots.&quot;
Sun Tzu

 

[sproosy]

Excellent. Thanks heaps.

Tuks, just MAN syslog and look up some stuff on the web

Sproosy MCP

Keep it real!