Capturing Syslog
I am new to wireshark. Sorry for the ignorance. How to capture security logs in wireshark?
add a comment
The default port for syslog traffic is udp/514, so if you're looking for a capture filter, it'd be udp dst port 514
and if you're looking for a Wireshark display filter, it'd be udp.dstport eq 514
.
Asked: 2023-04-30 12:59:45 +0000
Seen: 2,348 times
Last updated: May 02 '23