This video demonstrates how syslog works as an example of a network logging solution.
- [Narrator] Linux uses a consolidated and systematic … ordered logging mechanism called 'syslog'. … 'Syslog' supports both local, and remote log collection. … Each instance of Linux installation comes with 'syslog' … or it's variation, pre-installed by default, which manages … all the logs generated by software running on the host. … Therefore, providing a single point of management. … What we're going to use is 'rsyslog', which is a more … recent variation of 'syslog'. … The 'rsyslog' configuration file at the '/etc/rsyslog.conf' … directory. Let's open the file by typing … "nano" … "/etc/" … "rsyslog" … ".conf". … In the beginning of the file it says that … default logging rules can be found in … "/etc/rsyslog.d/50-default.conf". … Let's check this out. … First, exit out of the current file. … Press "Ctrl-X". … As the comment stated, the location is where 'rsyslog' … keeps all it's default rules. … Type "nano /etc/rsyslog.d/50-default.conf". … Press Enter. … Take a closer look at the line that says "mail.err", …
- Goals of network forensics
- Using a syslog and Microsoft Log Parser
- Investigating network traffic
- How protocol analysis works
- ARP and DNS poisoning
- Working with network forensics tools
- Using packet sniffers
Skill Level Intermediate
Learning Cryptography and Network Securitywith Lisa Bock1h 45m Intermediate
Insights from a Cybersecurity Professionalwith Mike Chapple32m 15s Intermediate
What you should know2m 11s
1. Understanding Network Forensics
2. Preparing for a Network Forensics Investigation
3. Investigating Network Events
4. Investigating Network Traffic
5. Network Forensics Tools
Next steps1m 15s
- Mark as unwatched
- Mark all as unwatched
Are you sure you want to mark all the videos in this course as unwatched?
This will not affect your course history, your reports, or your certificates of completion for this course.Cancel
Take notes with your new membership!
Type in the entry box, then click Enter to save your note.
1:30Press on any video thumbnail to jump immediately to the timecode shown.
Notes are saved with you account but can also be exported as plain text, MS Word, PDF, Google Doc, or Evernote.