: cisco-nsp@puck.nether.net
Subject: Re: [c-nsp] logging traffic
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
nfsen
ntop
Eimantas Zdanevičius wrote:
Thanks for help.
For now i get traffic connections from ASA 5520 logged to syslog
server. In future i wil use NetFlow.
Can anyone recommend
Thanks for help.
For now i get traffic connections from ASA 5520 logged to syslog server.
In future i wil use NetFlow.
Can anyone recommend good free netflow tools?
Pagarbiai,
Eimantas Zdanevičius
Tinklo administratorius
UAB Oslo products
Žirmūnų g. 27, LT-09105, Vilnius
Tel.: +370 5 276 2002
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
nfsen
ntop
Eimantas Zdanevičius wrote:
Thanks for help.
For now i get traffic connections from ASA 5520 logged to syslog
server. In future i wil use NetFlow.
Can anyone recommend good free netflow tools?
Pagarbiai, Eimantas Zdanevičius Tinklo
Hello,
I need to log traffic going trougth cisco 3825 router to syslog server.
Not all traffic data, i only need to log new connections.
How can i do this?
Thanks
Current config:
service timestamps debug datetime msec localtime show-timezone
service timestamps log datetime msec localtime
being.
Cheers,
Tom
- Original Message -
From: Eimantas Zdanevičius [EMAIL PROTECTED]
To: cisco-nsp@puck.nether.net
Sent: Thursday, August 30, 2007 5:22 PM
Subject: [c-nsp] logging traffic
Hello,
I need to log traffic going trougth cisco 3825 router to syslog server.
Not all traffic data
.
Cheers,
Tom
- Original Message -
From: Eimantas Zdanevičius [EMAIL PROTECTED]
To: cisco-nsp@puck.nether.net
Sent: Thursday, August 30, 2007 5:22 PM
Subject: [c-nsp] logging traffic
Hello,
I need to log traffic going trougth cisco 3825 router to syslog server.
Not all traffic
I need to log traffic going trougth cisco 3825 router to syslog server.
Not all traffic data, i only need to log new connections.
How can i do this?
there's a few ways you could accomplish this, but I'd recommend option (1):
1. NetFlow export
2. IP accounting
3. an ACL with 'log', something
UDP is connectionless, so it doesnt have SYN packets like TCP.
Cheers,
Tom
- Original Message -
From: Eimantas Zdanevičius [EMAIL PROTECTED]
To: Tom Storey [EMAIL PROTECTED]; cisco-nsp@puck.nether.net
Sent: Thursday, August 30, 2007 6:07 PM
Subject: Re: [c-nsp] logging traffic
Thanks
Please use #1.
#3 causes process switching and that's a very bad thing to do.
Rodney
On Thu, Aug 30, 2007 at 04:41:58PM +0800, Lincoln Dale (ltd) wrote:
I need to log traffic going trougth cisco 3825 router to syslog server.
Not all traffic data, i only need to log new connections.
How