User Tools
использование_протокола_syslog
Differences
This shows you the differences between two versions of the page.
|
использование_протокола_syslog [2010/09/10 12:01] val |
использование_протокола_syslog [2013/05/22 13:50] |
||
|---|---|---|---|
| Line 1: | Line 1: | ||
| - | ====== Использование протокола SYSLOG ====== | ||
| - | |||
| - | !!! add access list logging | ||
| - | |||
| - | ===== FreeBSD ===== | ||
| - | <code> | ||
| - | [gate:~] # grep syslog /etc/rc.conf | ||
| - | syslogd_flags="-a 192.168.X.0/24:*" | ||
| - | |||
| - | [gate:~] # grep local0 /etc/syslog.conf | ||
| - | local0.* /var/log/cisco.log | ||
| - | |||
| - | [gate:~] # touch /var/log/cisco.log | ||
| - | |||
| - | [gate:~] # /etc/rc.d/syslogd restart | ||
| - | |||
| - | [gate:~] # tail -f /var/log/cisco.log | ||
| - | </code> | ||
| - | |||
| - | ===== Ubuntu 8.04 (syslogd) ===== | ||
| - | <code> | ||
| - | root@gate:~# cat /etc/default/syslogd | ||
| - | ... | ||
| - | SYSLOGD="-r" | ||
| - | |||
| - | root@gate:~# cat /etc/syslog.conf | ||
| - | ... | ||
| - | local0.* /var/log/cisco.log | ||
| - | |||
| - | root@gate:~# touch /var/log/cisco.log | ||
| - | |||
| - | root@gate:~# chown syslog:adm /var/log/cisco.log | ||
| - | |||
| - | root@gate:~# /etc/init.d/sysklogd restart | ||
| - | |||
| - | root@gate:~# tail -f /var/log/cisco.log | ||
| - | </code> | ||
| - | |||
| - | ===== Ubuntu (rsyslogd) ===== | ||
| - | <code> | ||
| - | root@gate:~# rcsdiff /etc/rsyslog.conf | ||
| - | 20,21c20,21 | ||
| - | < #$ModLoad imudp | ||
| - | < #$UDPServerRun 514 | ||
| - | --- | ||
| - | > $ModLoad imudp | ||
| - | > $UDPServerRun 514 | ||
| - | |||
| - | root@gate:~# cat /etc/rsyslog.d/30-cisco.conf | ||
| - | local0.* -/var/log/cisco.log | ||
| - | |||
| - | root@gate:~# touch /var/log/cisco.log | ||
| - | root@gate:~# chown syslog:adm /var/log/cisco.log | ||
| - | |||
| - | root@gate:~# service rsyslog stop | ||
| - | |||
| - | root@gate:~# service rsyslog start | ||
| - | </code> | ||
| - | |||
| - | ===== Настройка cisco ===== | ||
| - | |||
| - | Вывод логов на экран telnet сессии | ||
| - | <code> | ||
| - | switch.corpX.un# terminal monitor | ||
| - | </code> | ||
| - | |||
| - | Отправка логов на syslog сервер | ||
| - | <code> | ||
| - | logging facility local0 | ||
| - | logging gate | ||
| - | </code> | ||
использование_протокола_syslog.txt · Last modified: 2013/05/22 13:50 (external edit)
Page Tools
Except where otherwise noted, content on this wiki is licensed under the following license: CC Attribution-Share Alike 4.0 International
