Turn your Cisco PIX Syslog files into Graphs using Syslog Junction.

I was setting up a bunch of monitoring at work as we hadn’t have that much implemented. I ran into this application in a random fashion. Sys Junction is an application that graphs out syslog data from Cisco PIX firewalls.

I was setting up a bunch of monitoring at work as we hadn’t have that much implemented. I ran into this application in a random fashion. Sys Junction is an application that graphs out syslog data from Cisco PIX firewalls.

The setup is simple, you download the install archive, extract it and then run the install script “run.sh”. You will need to make sure that the file has executable permissions, since my install was a linux install (they also have a windows version). Run “chmod u+x run.sh” beforehand. You would think that from reading the documentation the install would occur, but no install actually occurs. Once you type “run.sh” the application forks into the background and starts printing random logging information on your terminal. It doesn’t even install as a service, you have to do this yourself.

Now that you have Syslog Junction running, you can open up your web browser and point it to “http://127.0.0.1:11052” or the IP address of the server you have it running on. You should see a login screen, enter in the default login information which is “admin/letmein”. And bam you either see graphs or no graphs!

I didn’t have graphs! I look back now and think, should have spent 3 hours on trying to get this to finally work or not? Was it worth all the trouble of trying to figure out the problem instead of having a Install Document or any type of information other than a couple pages of a PDF file with only a couple pages of information.

After look at the logs in the folder “logs”, I see in the file “SLJunction.log”. So I decide to tail it to see whats in it. And Viola! I get an error message

2007-11-20 16:12:29,640 ERROR sljunction.SLJunctionApp - Unable to start Syslog server. Address already in use

So I ponder to myself and do what anybody in my position would do, start grinding out the debugging tools. So I run netstat:


[root@pablo:/var/www/default/SLJunction/logs]# netstat -nlp | grep syslog
udp 110400 0 0.0.0.0:514 0.0.0.0:* 4646/syslogd

Oh and look syslog had the -r option for remote machine logging. So I disabled syslog and start Syslog Junction again and no more error. But instead of getting pretty graphs, I get blank ones again.

After further testing it look as though you have to make sure that your Cisco PIX is sending only Informational syslog data otherwise it pick up the traffic.

All in all, a good application, but time consuming!

Visit the Syslog Junction site.


Did you like this article?


0 Shares:
You May Also Like

US Prepares for Eventual Cyberwar

US Prepares for Eventual Cyberwar - The New York Times is reporting on preparations in the works by the US government to prep for a 'cyberwar'. Precautionary measures are being taken to guard against concerted attacks by politically-minded (or well-paid) hackers looking to cause havoc. Though they outline scenarios where mass damage is the desired outcome (such as remotely opening a dam's gates to flood cities), most expect such conflicts to be more subtle. Parts of the internet, for example, may be unreachable or unreliable for certain countries. Regardless, the article suggests we've already seen our first low-level cyberwar in Estonia: "The cyberattacks in Estonia were apparently sparked by tensions over the country's plan to remove Soviet-era war memorials. Estonian officials initially blamed Russia for the attacks, suggesting that its state-run computer networks blocked online access to banks and government offices. The Kremlin denied the accusations. And Estonian officials ultimately accepted the idea that perhaps this attack was the work of tech-savvy activists, or 'hactivists,' who have been mounting similar attacks against just about everyone for several years."

Read more of this story at Slashdot.

[Slasdot]
Read More

AT&T Hires 2,000 Extra Employees For iPhone Launch

AT&T Hires 2,000 Extra Employees For iPhone Launch -

Never again do I want to hear people complaining that they couldn’t find a summer job. Seems AT&T is so confident that people will show up for the iPhone in droves, it has taken the liberty of hiring an extra 2,000 employees to prepare for the madness. To make sense of how big the iPhone launch is going to be, here are some hot statistics:

  • 1,800 AT&T retail stores exist and will all be selling the iPhone
  • AT&T sales staff have received a total of 100,000 hours of training to sell the device, with each employee receiving about six hours of individual training
  • AT&T stores will close locally at 4:30 p.m. on that Friday to prepare for the launch, then reopen at 6 p.m. until 10 p.m. that night.

  • I’m going to be laughing all the way home if Apple and AT&T do all this training and preparation, only to find three dudes with fat wallets sitting outside a store on June 29. It’s almost here kids.

    AT&T hires 2,000 extra workers for iPhone launch [Yahoo! News]

    [CrunchGear]
    Read More

    Why Red Hat doesn’t need a deal with Microsoft

    This is a good article, talks about RedHat and Microsoft and how RedHat knows whats actually going down.
    Why Red Hat doesn't need a deal with Microsoft -

    The trade press reported a lot of rumors this past week about the chances for a patent protection pact between Red Hat and Microsoft similar to the agreements Microsoft negotiated with Novell, Xandros, and Linspire. Red Hat doesn't appear to be interested in the least. Here's why.

    [Linux.com]
    Read More

    Writers Write “B-Logs,” Get Money

    This is an interesting read of other people in the business that write all about technology and get paid for it. I guess we're all trying to get to a point in our life where we can do something we enjoy and also be financially stable at the same time. This is a good way to start.
    Writers Write “B-Logs,” Get Money -

    arringtonmalikx.jpgUSA Today, that bastion of hard news, is covering a new fad popular with the kids called “B-logging.” They talk about two “b-loggers,” Om Malley and Mike Orvington, who used to work at real jobs and now eat ice cream and write about computers.

    Now I don’t know who these people are or what they think they’re doing, but I think it’s bad to show people that you can make “real money” — how much, Om Malley? $5? HA! — doing this. There are jobs that Americans should be doing — car repair, HVAC installation, dance instruction — that are going empty while these two jokers sit around all day pretending to work. For shame. “B-logging,” like stamp collecting and religious observance, should be considered a hobby and nothing more. Let’s not encourage these bozos.

    Tech blogs go from hobbies to businesses [USAToday]

    [CrunchGear]
    Read More