Re: Central syslog server best practices?

From: Katsuhiro Kondou (kondouat_private)
Date: Sun Aug 12 2001 - 08:37:02 PDT

Next message: Andreas Östling: "Re: Central syslog server best practices?"

Previous message: Adrian Mink: "RE: NT Syslog"
In reply to: Marlys A Nelson: "Central syslog server best practices?"
Next in thread: Michael Poon: "Re: Central syslog server best practices?"
Next in thread: Andreas Östling: "Re: Central syslog server best practices?"
Reply: Michael Poon: "Re: Central syslog server best practices?"
Reply: Ron Russell: "[loganalysis] Re: Central syslog server best practices?"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

In article <3B74F5B5.9D071D2Dat_private>,
	Marlys A Nelson <marlys.a.nelsonat_private> wrote;

} able to be changed in case of a host compromise. Recently, the log
} traffic from our firewall (linux running ipchains) has been so heavy
} that the syslog server has been losing data.

Doesn't syslog thru tcp help?  It's possible with
syslog-ng, though I've never used.
-- 
Katsuhiro Kondou

---------------------------------------------------------------------
To unsubscribe, e-mail: loganalysis-unsubscribeat_private
For additional commands, e-mail: loganalysis-helpat_private

Next message: Andreas Östling: "Re: Central syslog server best practices?"
Previous message: Adrian Mink: "RE: NT Syslog"
In reply to: Marlys A Nelson: "Central syslog server best practices?"
Next in thread: Michael Poon: "Re: Central syslog server best practices?"
Next in thread: Andreas Östling: "Re: Central syslog server best practices?"
Reply: Michael Poon: "Re: Central syslog server best practices?"
Reply: Ron Russell: "[loganalysis] Re: Central syslog server best practices?"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

This archive was generated by hypermail 2b30 : Sun Aug 12 2001 - 08:45:08 PDT