On Jun 20, 2005, at 5:37 AM, C. L. Martinez wrote:
Hi all,
Somebody has used hatchet when all openbsd logs are redirected to a
centrel syslog server based on Linux/Solaris???
This really belongs on the hatchet-users mailing list
(http://dixongroup.net/mailman/listinfo/hatchet-users).
I've done this before, logging to Linux sysklogd. Start with the
SPLIT-INSTALL document. You'll want to have it sent over on something
like local0 so you can split it into a separate logfile on the syslog
server. Once that's done, you'll need to modify the hatchet script to
read from the ascii logfile instead of via the tcpdump filehandle.
Basic perl skills will get you there.
--
Jason Dixon
DixonGroup Consulting
http://www.dixongroup.net
