Capturing Syslog
I am new to wireshark. Sorry for the ignorance. How to capture security logs in wireshark?
1 Answer
- Sort by
oldest newest most voted
0
The default port for syslog traffic is udp/514, so if you're looking for a capture filter, it'd be udp dst port 514 and if you're looking for a Wireshark display filter, it'd be udp.dstport eq 514.
Your Answer
Please start posting anonymously - your entry will be published after you log in or create a new account.
This space is reserved only for answers. If you would like to engage in a discussion, please instead post a comment under the question or an answer that you would like to discuss.
Comments