[Snort-users] Win32 Port and Syslog

Gregor Binder gbinder at ...462...
Fri Nov 24 04:06:59 EST 2000


Michael Davis on Thu, Nov 23, 2000 at 09:50:28PM -0600:

Hi,

> Now, should the PORT be the port the REMOTE syslog server listens on
> OR the port that the UDP packet that is sent to the remote syslog
> server has?
> 
> I ask this because you can setup your remote syslog server to only
> take UDP packets from a certain host and certain port.

Take into consideration that there are also syslog-servers that allow
you to specify the listening port yourself. So the server port should
probably configurable.

Greetings,
  Gregor.

-- 
Gregor Binder  <gbinder at ...462...>  http://www.sysfive.com/~gbinder/
sysfive.com GmbH             UNIX. Networking. Security. Applications.
Gaertnerstrasse 125b, 20253 Hamburg, Germany       TEL +49-40-63647482



More information about the Snort-users mailing list