kleena
29-12-2005, 12:04
Hi again!
I'm wondering about another issue as well. I'd like to have certain network events (as, for instance, port 22 communication attempts) logged, and, for it to make sense, every now and then, exported soewhere safe.
First, iptables don't seem to be willing to -j LOG on my box. Can I help this? What do I have to install/configure?
Then, is there a software to periodically export the logs? One could simply gzip and put them somewhere, but then I can imagine cases where I've cut the log out, but then couldn't post it to the remote agent, so a queue would be needed...etc. And I imagine this has to have been solved 1000x before...
Thanks for any hints and directions. :-)
I'm wondering about another issue as well. I'd like to have certain network events (as, for instance, port 22 communication attempts) logged, and, for it to make sense, every now and then, exported soewhere safe.
First, iptables don't seem to be willing to -j LOG on my box. Can I help this? What do I have to install/configure?
Then, is there a software to periodically export the logs? One could simply gzip and put them somewhere, but then I can imagine cases where I've cut the log out, but then couldn't post it to the remote agent, so a queue would be needed...etc. And I imagine this has to have been solved 1000x before...
Thanks for any hints and directions. :-)