Comments on: Comments on the Syslog Protocol Internet Draft http://raffy.ch/blog/2008/12/18/comments-on-the-syslog-protocol-internet-draft/ IT security data visualization and log management as seen by Raffael Marty Thu, 03 Dec 2009 16:26:05 -0500 http://wordpress.org/?v=2.8.4 hourly 1 By: Darren M http://raffy.ch/blog/2008/12/18/comments-on-the-syslog-protocol-internet-draft/comment-page-1/#comment-16195 Darren M Tue, 21 Apr 2009 23:01:58 +0000 http://raffy.ch/blog/2008/12/18/comments-on-the-syslog-protocol-internet-draft/#comment-16195 As the author of sphere of influence, I know what you mean. Its extremely frustrating to create tools as one vendors implementation differs greatly from anothers..I created a visualization tool for syslog events, but im having to create the tool vendor by vendor... As the author of sphere of influence, I know what you mean. Its extremely frustrating to create tools as one vendors implementation differs greatly from anothers..I created a visualization tool for syslog events, but im having to create the tool vendor by vendor…

]]> By: Rainer Gerhards http://raffy.ch/blog/2008/12/18/comments-on-the-syslog-protocol-internet-draft/comment-page-1/#comment-16151 Rainer Gerhards Tue, 17 Mar 2009 14:52:52 +0000 http://raffy.ch/blog/2008/12/18/comments-on-the-syslog-protocol-internet-draft/#comment-16151 I've finally begun to reply to your post, here is the first response to <a href="http://blog.gerhards.net/2009/03/why-is-there-still-pri-in-syslog.html" rel="nofollow">PRI and facility</a>. Rainer I’ve finally begun to reply to your post, here is the first response to PRI and facility.

Rainer

]]> By: Security Predictions for 2009 » Raffy http://raffy.ch/blog/2008/12/18/comments-on-the-syslog-protocol-internet-draft/comment-page-1/#comment-15332 Security Predictions for 2009 » Raffy Thu, 25 Dec 2008 09:07:44 +0000 http://raffy.ch/blog/2008/12/18/comments-on-the-syslog-protocol-internet-draft/#comment-15332 [...] logs, and generic IT data. Recently a new syslog RFC was published. I was much too late to actually comment on it. It has good intentions, but it is definitely not what I would like it to be. CEE is still [...] [...] logs, and generic IT data. Recently a new syslog RFC was published. I was much too late to actually comment on it. It has good intentions, but it is definitely not what I would like it to be. CEE is still [...]

]]> By: Kris http://raffy.ch/blog/2008/12/18/comments-on-the-syslog-protocol-internet-draft/comment-page-1/#comment-15092 Kris Fri, 19 Dec 2008 08:35:33 +0000 http://raffy.ch/blog/2008/12/18/comments-on-the-syslog-protocol-internet-draft/#comment-15092 $ logger -p local0.notice -t HOSTIDM -f /dev/idmc "miss you Raffy" $ logger -p local0.notice -t HOSTIDM -f /dev/idmc “miss you Raffy”

]]> By: Vincent Bernat http://raffy.ch/blog/2008/12/18/comments-on-the-syslog-protocol-internet-draft/comment-page-1/#comment-15081 Vincent Bernat Fri, 19 Dec 2008 03:56:26 +0000 http://raffy.ch/blog/2008/12/18/comments-on-the-syslog-protocol-internet-draft/#comment-15081 The T in date/time is in <a href="http://en.wikipedia.org/wiki/ISO_8601" title="ISO 8601" rel="nofollow">ISO 8601</a>. The T in date/time is in ISO 8601.

]]>