On Fri, Sep 14, 2001 at 09:54:26AM +0200, Andreas Siegert wrote: > Or switch to syslog-ng from > http://www.balabit.hu/en/products/syslog-ng/ > Don't know how well it works nowadays, When I played with it several years ago > it was beta, but looked very promising. (Anyone on the list with production > experience of syslog-ng?) It's been used in our log server. It works fine and the configuration file is powerful and easy to read. A nice feature is that Syslog-ng writes the local server and the syslog clients timestamps, so you can detect spoofed or not synchronized timestamps. Jose _______________________________________________________________________________ Jose A. Rodriguez OOO Universitat Politecnica de Catalunya (UPC) josearat_private OOO Departament d'Arquitectura de Computadors Tel. 6990 OOO -*- LCAC -*- UPC --------------------------------------------------------------------- To unsubscribe, e-mail: loganalysis-unsubscribeat_private For additional commands, e-mail: loganalysis-helpat_private
This archive was generated by hypermail 2b30 : Fri Sep 14 2001 - 06:54:00 PDT