:LinuxSecurity.com: Flying Pigs: Snorting Next Generation Secure Remote Log Servers over TCP
LinuxSecurity.com: Flying Pigs: Snorting Next Generation Secure Remote Log Servers over TCP Jun 6, 2002, 03 :00 UTC (0 Talkback[s]) (6165 reads) (Other stories by Eric Hines)
"The precursor to this article, Creating Secure Remote Log Servers, was the first in a series of papers focused on walking readers through configuring and deploying secure remote log servers. This second paper in the series offers a much more robust alternative to first generation SYSLOG servers; providing a much more reliable remote logging facility that is effective for use within Honeynets (http://project.honeynet.org) and Intrusion Detection System deployments. Remote log servers can provide centralized logging capability for IDS’ spread across large network environments. I have proposed this approach for centralized logging in large IDS deployments on government networks that typically consist of multiple CLASS A networks.
"What this paper hopes to accomplish is to walk its readers through building next generation secure remote log servers to use in any environment, more specifically those wanting to utilize this form of logging with the Snort Intrusion Detection System (http://www.snort.org)..."
