Syslog

[primate]

Hi,

I'm writing a php script to parse through syslog messages from my PIX firewalls to look for intrusion attempts etc.

Fortunately of the messages that I am interested in only a few have actually been logged (am I tempting fate there?!)but that means that I can't test my script on the unlogged messages.

Does anyone know of a way to force the PIX to produce specific messages or to get it to dump a load of dummy messages?

 

[lgarner]

Not exactly, but the Kiwi Syslog Generator might do what you want.

http://www.kiwisyslog.com

 

[baddos]

Check what your logging level is setup to on your PIX.

Try "logging trap debugging" to get a FULL hard drive.

 

[primate]

I've dumped part of the database to an Excel spreadsheet and manually added examples of the messages I'm looking for based on Cisco's system log messages manual. Not exactly the best way but better than nothing!