Eikonal Blog

2010.04.13

Logging

Filed under: infosec, logging — Tags: , , , , , , — sandokan65 @ 14:27

Sites

Logging tools

Articles and Papers

Syslog

    The standard UNIX syslog facilities are

    • kern – kernel
    • user – application or user processes (this is the default if the application sending a message does not specify the facility)
    • mail/news/UUCP/cron – electronic mail/NNTP/UUCP/cron subsystems
    • daemon – system daemons
    • auth – authentication (login) and authorization related commands
    • lpr – line printer spooling subsystem
    • mark – inserts timestamp into log data at regular intervals
    • local0-local7 – 8 facilities for customized auditing
    • syslog – internal messages generated by syslog itself
    • authpriv – non-system authorization messages
    • * — on most versions of UNIX, refers to all facilities except mark

    Syslog message levels:

    • 0 Emergency (emerg) – system is or will be unusable if situation is not resolved
    • 1 Alert (alert) – immediate action required
    • 2 Critical (crit) – critical conditions
    • 3 Error (error) – error conditions
    • 4 Warning (warning) – warning conditions, recoverable errors
    • 5 Notice (notice) – normal but significant condition; unusual situation that merits investigation; a significant event that is typically part of normal day-to-day operation
    • 6 Informational (info) – informational messages
    • 7 Debug (debug) – debug-level messages; verbose data for debugging

    Syslog actions:

    • filename – write message to the specified file on the local machine
    • @hostname or @ipaddress – forward message to remote loghost
    • user1,user2,… — write message to consoles of users named in list, if user is logged-in
    • * — write message to all logged-in users

    Links:

2 Comments »

  1. […] Logging tools – https://eikonal.wordpress.com/2010/04/13/logging/ […]

    Like

    Pingback by Security tools « Eikonal Blog — 2010.07.28 @ 14:23


RSS feed for comments on this post. TrackBack URI

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s

Create a free website or blog at WordPress.com.

%d bloggers like this: