Ask Your Question
0

Capturing Syslog

asked 2023-04-30 12:59:45 +0000

VijaySeshadri gravatar image

I am new to wireshark. Sorry for the ignorance. How to capture security logs in wireshark?

edit retag flag offensive close merge delete
add a comment

1 Answer

Sort by ยป oldest newest most voted
0

answered 2023-05-02 13:16:18 +0000

cmaynard gravatar image

The default port for syslog traffic is udp/514, so if you're looking for a capture filter, it'd be udp dst port 514 and if you're looking for a Wireshark display filter, it'd be udp.dstport eq 514.

edit flag offensive delete link more
add a comment

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account.

Add Answer

Question Tools

1 follower

subscribe to rss feed

Stats

Asked: 2023-04-30 12:59:45 +0000

Seen: 1,886 times

Last updated: May 02 '23