Turn your Cisco PIX Syslog files into Graphs using Syslog Junction.

I was setting up a bunch of monitoring at work as we hadn’t have that much implemented. I ran into this application in a random fashion. Sys Junction is an application that graphs out syslog data from Cisco PIX firewalls.

I was setting up a bunch of monitoring at work as we hadn’t have that much implemented. I ran into this application in a random fashion. Sys Junction is an application that graphs out syslog data from Cisco PIX firewalls.

The setup is simple, you download the install archive, extract it and then run the install script “run.sh”. You will need to make sure that the file has executable permissions, since my install was a linux install (they also have a windows version). Run “chmod u+x run.sh” beforehand. You would think that from reading the documentation the install would occur, but no install actually occurs. Once you type “run.sh” the application forks into the background and starts printing random logging information on your terminal. It doesn’t even install as a service, you have to do this yourself.

Now that you have Syslog Junction running, you can open up your web browser and point it to “http://127.0.0.1:11052” or the IP address of the server you have it running on. You should see a login screen, enter in the default login information which is “admin/letmein”. And bam you either see graphs or no graphs!

I didn’t have graphs! I look back now and think, should have spent 3 hours on trying to get this to finally work or not? Was it worth all the trouble of trying to figure out the problem instead of having a Install Document or any type of information other than a couple pages of a PDF file with only a couple pages of information.

After look at the logs in the folder “logs”, I see in the file “SLJunction.log”. So I decide to tail it to see whats in it. And Viola! I get an error message

2007-11-20 16:12:29,640 ERROR sljunction.SLJunctionApp - Unable to start Syslog server. Address already in use

So I ponder to myself and do what anybody in my position would do, start grinding out the debugging tools. So I run netstat:


[[email protected]:/var/www/default/SLJunction/logs]# netstat -nlp | grep syslog
udp 110400 0 0.0.0.0:514 0.0.0.0:* 4646/syslogd

Oh and look syslog had the -r option for remote machine logging. So I disabled syslog and start Syslog Junction again and no more error. But instead of getting pretty graphs, I get blank ones again.

After further testing it look as though you have to make sure that your Cisco PIX is sending only Informational syslog data otherwise it pick up the traffic.

All in all, a good application, but time consuming!

Visit the Syslog Junction site.


Did you like this article?


0 Shares:
You May Also Like

Featured Windows Download: Manage Multiple Remote Desktop Connections with mRemote

LifeHacker has a review up on their site about a little application called 'mRemote'. This is quite a piece of software and you can tell that the developers have spent some time on it. I have always been an advocate of being more organized and efficient. With mRemote everything that you need is in one screen, and everything that was left out with Microsoft's Remote Desktop Connection Client is in mRemote. Tabbed windows, supports RDP, VNC, SSH2 and telnet protocols. There is also a connection manager, so you can setup all your connections and then point and click to connect.
Read More

Corporate critics feel the stinging lash of DMCA misuse

I use to work for an ISP and was head of the Abuse Department. We only really received legitimate DCMA's that were then handled by legal. We didn't really seem to get that many DMCA notices, maybe its because we're a Canadian organization?
Corporate critics feel the stinging lash of DMCA misuse -

Two recent cases show that companies aren't always fans of criticism, and some will file misguided DMCA notices and defamation cases to scrub it from the Internet.

Read More...

Read More

Helio Ocean Graffiti Hotness

Helio Ocean Graffiti Hotness -

I’m a Sidekick 3 fanboy through and through, but Helio is definitely making its case. I’ve had an Ocean for a few weeks now and I’ll admit that I love it. The GPS feature is hot and it definitely helps me out when I manage to get lost in NYC. I came across some really cool vids that Helio has put up on Youtube and I thought I’d share it with everyone. This particular video is of STASH and his ongoing mural for the Ocean on the Upper West Side of NYC. Not only is the art hot, but the music by Lady Tigra will rock you out. Check out all the other Helio vids here.

[CrunchGear]
Read More