SecurityFocus

[logs] Is "last message repeated n times" anything good? 2008-03-18
Rainer Gerhards (rgerhards hq adiscon com)

Hi all,

I am the author of rsyslog (http://www.rsyslog.com), a GPLed enhanced
syslogd. I am currently developing the v3 version and would appreciate
feedback on the "last message repeated n times" feature.

In order to be backwards-compatible with sysklogd, rsyslog supports the
"last message repeat

[ more ] [ reply ]

Re: [logs] "session" messages in Cisco FWSM logs? 2008-03-14
Anusuya Kompella (anusuya_k yahoo com)

Hi Andrew,
This looks like EMBLEM format. I have seen this kind of id (event class before facility ) when I enabled EMBLEM format on cisco ASA box. Should not be any different for FWSM.

Anusuya

Sent from my iPhone

On Mar 14, 2008, at 6:46 AM, "Andrew Hay" <andrewsmhay (at) gmail (dot) com [email concealed]> wrote:

Hey A

[ more ] [ reply ]

[logs] tenshi 0.10 2008-03-14
Andrea Barisani (andrea inversepath com)

Hi!

We are pleased to announce that tenshi 0.10 has been released, this is a
bugfix release.

tenshi is a log monitoring program, designed to watch one or more log files
for lines matching user defined regular expressions and report on the matches.
The regular expressions are assigned to queues w

[ more ] [ reply ]

[logs] "session" messages in Cisco FWSM logs? 2008-03-14
Andrew Hay (andrewsmhay gmail com)

Hey All,

I've been struggling to find some sort of documentation on the Cisco site
(or elsewhere) that tell me why, all of a sudden, Cisco FWSM logs now have
the string "session" where there was no "session" string before :)

Example:

%FWSM-session-6-305011

For as far back as I can remember the f

[ more ] [ reply ]

[logs] How do you cull through serial console logs? 2008-03-07
Zonker Harris (consoleteam gmail com) (2 replies)

I'm using Conserver, which makes reverse-TCP connections to console
server serial ports, so I can manage my hosts and net gear. This
results in an ASCII text file for each device.

What tool(s) can I use to watch all (500+) files for 'interesting'
strings, like malloc errors, failed logins, ne

[ more ] [ reply ]

AW: [logs] How do you cull through serial console logs? 2008-03-10
christian folini post ch

Re: [logs] How do you cull through serial console logs? 2008-03-08
Michael Kinsley (michael kinsley sensage com) (2 replies)

Re: [logs] How do you cull through serial console logs? 2008-03-10
Ulisses Reina Montenegro de Albuquerque (ulisses tempest com br)

RE: [logs] How do you cull through serial console logs? 2008-03-10
Rainer Gerhards (rgerhards hq adiscon com)

[logs] CEE publishing a Common Field List 2008-03-06
Raffael Marty (rmarty splunk com)

Under the umbrella of the common event expression (http://
cee.mitre.org) effort, we just posted a proposal for a "common field
list":
http://www.nabble.com/CEE-Field-List-to15881800.html

At this point, we are really interested in getting feedback from the
community! Have a look at the post on

[ more ] [ reply ]