Sponsored Content
Full Discussion: logging
Special Forums Cybersecurity logging Post 25876 by cerberusofhate on Wednesday 7th of August 2002 02:03:36 AM
Old 08-07-2002
Or, you can just use ipchains for this:
/sbin/ipchains -A input -l -p all
/sbin/ipchains -A output -l -p all
and then set a script to parse /var/log/messages (default for syslogd to send log entries from ipchains):
cat /var/log/messages | grep "Packet log: input" > $HOME/input_log
cat /var/log/messages | grep "Packet log: output" > $HOME/output_log

Then just save these files off-site. However, lots of ppl just like to use someone's tools to do the same thing, but hey, ipchains comes with a lot of distros nowadays, why not use it? ;-)
cerberusofhate
 

10 More Discussions You Might Find Interesting

1. UNIX for Dummies Questions & Answers

Logging

I have a SCO R5 Open Server Box running at a remote location, and from time to time it seems to "spontaneously" re-boot itself. Is there a specific log file that I can examine to see why the machine is doing this ? Any suggestions gratefully appreciated (1 Reply)
Discussion started by: pcs7088
1 Replies

2. Shell Programming and Scripting

Logging

G'day Just wondering if anyone out there knows how to log files, using the example I provided in the earlier message / question earlier today: :confused: If I was to backup a file, how could I setup a log file to record the filename, date (This one I've got figured), and that the file was... (4 Replies)
Discussion started by: Aussie_Bloke
4 Replies

3. UNIX for Dummies Questions & Answers

logging when someone changes to su

Is there a file that captures info whenever someone logs to su? i know it comes across as standard output on the server, but is it saved anywhere? Time and date info included?? thanks, kym (1 Reply)
Discussion started by: kymberm
1 Replies

4. UNIX for Dummies Questions & Answers

Asking about logging in

Hi, just wriiten a sh script and as my script will try to log into another server to delete some files but when i run , it keeps on saying that my files do not exist. It seems to refer to my local directory instead. Below is my script : FTP_HOST=ip_number FTP_USER="user password" ... (1 Reply)
Discussion started by: blueberry80
1 Replies

5. UNIX for Dummies Questions & Answers

need more logging

Hi all! On our current Solaris 8 machine we only have "standard" logging configured, and now i need to put on more. What i specificly need is time in the logfiles. Ex. When a user is logging in, when a user makes it self SU. etc. Regards... dOzY (3 Replies)
Discussion started by: dozy
3 Replies

6. Programming

Logging

Hi How to manage logging in an application. Actually I am developing a Client-Server application in c/c++ and want to manage an optional logging in my application, but since prior I have never done ths activity. Plz guide me. thanks. (2 Replies)
Discussion started by: sumsin
2 Replies

7. AIX

Logging off users

What is the best way to logoff users from my Unix system? I have done a search and found that you can do a w or who - find who is on, and ps-ef | grep <user> and kill their processes. But what if you have a bunch of users and you need them off the system quickly? Killing individual processes... (1 Reply)
Discussion started by: outtacontrol
1 Replies

8. Shell Programming and Scripting

logging into

Hi all Can anyone tell me how to login inot telnet,i heard that it is an interface between unix and windows,if i am wrong please correct me. Thanks in anticipation (1 Reply)
Discussion started by: vinayrao
1 Replies

9. Post Here to Contact Site Administrators and Moderators

Constant Logging In (After Logging Out)

Hi Everyone. First, I want to thank all of you for letting me participate in this great group. I am having a bit of a problem. After I get an email from a responder, I login to make my reply. In the mean time I get another response by email from another member, I go to reply to them and I... (6 Replies)
Discussion started by: Ccccc
6 Replies

10. Linux

Syslog not logging successful logging while unlocking server's console

When unlocking a Linux server's console there's no event indicating successful logging Is there a way I can fix this ? I have the following in my rsyslog.conf auth.info /var/log/secure authpriv.info /var/log/secure (1 Reply)
Discussion started by: walterthered
1 Replies
SCROLLKEEPER-REBUILDDB(8)				      System Manager's Manual					 SCROLLKEEPER-REBUILDDB(8)

NAME
scrollkeeper-rebuilddb - rebuild the scrollkeeper document catalog database SYNOPSIS
scrollkeeper-rebuilddb [-p path ] [-v] [-q] DESCRIPTION
This rebuilds the ScrollKeeper database from the original OMF metadata files and documents. Under normal situations, this tool is not nec- essary. It is useful however if the database becomes corrupt, which could be caused by interruption of ScrollKeeper during an update of the database. Errors and warnings are logged to /var/log/scrollkeeper.log. OPTIONS
-p path Use path as the ScrollKeeper database directory. -v Verbose. Show warnings and error messages in addition to logging them to /var/log/scrollkeeper.log. -q Run in quiet mode, suppressing output of all but the most serious warning and error messages to STDOUT. Note that most output to the log file will be unchanged. FILES
/var/lib/scrollkeeper/scrollkeeper_docs /var/lib/scrollkeeper/TOC/<docnumber> /var/lib/scrollkeeper/<locale>/scrollkeeper_cl.xml /var/lib/scrollkeeper/<locale>/scrollkeeper_extended_cl.xml /var/log/scrollkeeper.log AUTHOR
Laszlo Kovacs <laszlo.kovacs@sun.com> Dan Mueth <d-mueth@uchicago.edu> SEE ALSO
scrollkeeper-config(1), scrollkeeper-gen-seriesid(1), scrollkeeper.conf(5), scrollkeeper(7), scrollkeeper-preinstall(8), scrollkeeper- update(8) scrollkeeper Dec 5, 2001 SCROLLKEEPER-REBUILDDB(8)
All times are GMT -4. The time now is 09:01 AM.
Unix & Linux Forums Content Copyright 1993-2022. All Rights Reserved.
Privacy Policy