06-10-2015
I have tried tcpdump against client ip
Also my logging server is logstrach with kibana front end
10 More Discussions You Might Find Interesting
1. Solaris
Hi, Can anyone pls. tell me how to access Active directory from solaris. I am looking at solution by which I can send mail notification from the logs generated by scripts, to the users on Exchange server. I am trying for a Perl-LDAP module , but don't realy know how to go for it (5 Replies)
Discussion started by: ganeshh
5 Replies
2. Solaris
Dear all
I would like to know that is there any way to find out that any client of solaris server, is fetching data from a server, in that situationng server can log what data which is flowing in the form of packet, client is fetching from the server through any application or any utility.
... (3 Replies)
Discussion started by: girish.batra
3 Replies
3. UNIX for Advanced & Expert Users
Hi All,
I have a requirement to send and email of body html with an attachment.
concatinating uuencode output to the mail body with mailx command works, but as my Email body is of HTML type i use sendmail.
my command to send HTML body is as below:
export MAILTO="recipient@domain.com"... (1 Reply)
Discussion started by: mohan_kumarcs
1 Replies
4. Solaris
Hi all,
I want to implement a Syslog Server but i'm new in this area. I donīt know how to configure it in Solaris. I should like send all the logs to a application(manipule the information, por example: do the alerts, configure it, etc...) How can I do that? or Which manual can help me? Exists... (2 Replies)
Discussion started by: yflores
2 Replies
5. Solaris
Hello everyone
I have a problem and I need your help:
I have a Solaris 10 and Solaris 8 UNIX Servers, and Linux Centos4 as email server.
I need send an email from Solaris servers preferably using Centos4 email server.
I have no mail service configured in my Solaris computers (1 Reply)
Discussion started by: aflores
1 Replies
6. Shell Programming and Scripting
i am new in AIX i am trying to write a script to take a backup for specific files on server to and check error log if backup success send email to administrator , script done except for sending mail , i try to configure sendmail on aix to use our exchange server to send emails but still get error... (0 Replies)
Discussion started by: ahmed_salah
0 Replies
7. Shell Programming and Scripting
taus-itcapp1#powermt display dev=all
Pseudo name=emcpower0a
CLARiiON ID=APM00105201788
Logical device ID=60060160B2202B001094F0E0AF5CE011
state=alive; policy=CLAROpt; priority=0; queued-IOs=0;
Owner: default=SP A, current=SP A Array failover mode: 1
... (6 Replies)
Discussion started by: orafup
6 Replies
8. Solaris
Hi folks,
I am attempting to setup a Solaris 10 syslog server to receive logs from linux machines. Here's what I did:
On the server (SunOS sun226 5.10), IP address: 192.168.212.226:
1. start syslogdby issuing $/usr/sbin/syslogd -T
On a client (SunOS sun221 5.8):
1. Configured... (1 Reply)
Discussion started by: kimurayuki
1 Replies
9. Solaris
I am trying to configure central syslog server
On hostA, in /etc/syslog.conf file,I am adding below line*.err;kern.debug;daemon.notice;mail.crit @hostB
then I am restarting syslog servicesvcadm restart /system/system-log
In hostA, I have already added hostB entry in /etc/hosts... (5 Replies)
Discussion started by: amity
5 Replies
10. AIX
Hi everyone,
I am trying to configure AIX 6.1 using syslogd to send syslog event to syslog server configured on RHEL. However, RHEL never receives the events.
I have tried to redirect the syslog event on AIX to a local file and successful. Only forwarding to remote server fails.
Firewall... (10 Replies)
Discussion started by: michael_hoang
10 Replies
PFLOG(4) BSD Kernel Interfaces Manual PFLOG(4)
NAME
pflog -- packet filter logging interface
SYNOPSIS
device pflog
DESCRIPTION
The pflog interface is a pseudo-device which makes visible all packets logged by the packet filter, pf(4). Logged packets can easily be mon-
itored in real time by invoking tcpdump(1) on the pflog interface, or stored to disk using pflogd(8).
The pflog0 interface is created automatically at boot if both pf(4) and pflogd(8) are enabled; further instances can be created using
ifconfig(8).
Each packet retrieved on this interface has a header associated with it of length PFLOG_HDRLEN. This header documents the address family,
interface name, rule number, reason, action, and direction of the packet that was logged. This structure, defined in <net/if_pflog.h> looks
like
struct pfloghdr {
u_int8_t length;
sa_family_t af;
u_int8_t action;
u_int8_t reason;
char ifname[IFNAMSIZ];
char ruleset[PF_RULESET_NAME_SIZE];
u_int32_t rulenr;
u_int32_t subrulenr;
uid_t uid;
pid_t pid;
uid_t rule_uid;
pid_t rule_pid;
u_int8_t dir;
u_int8_t pad[3];
};
EXAMPLES
Create a pflog interface and monitor all packets logged on it:
# ifconfig pflog1 up
# tcpdump -n -e -ttt -i pflog1
SEE ALSO
tcpdump(1) inet(4), inet6(4), netintro(4), pf(4), ifconfig(8), pflogd(8)
HISTORY
The pflog device first appeared in OpenBSD 3.0.
BSD
December 10, 2001 BSD