Linux Server Security (2nd Edition( [Electronic resources]

12.7. Resources

http://www.balabit.com

Official home of Syslog-ng.

Campin, Nate. "Central Loghost Mini-HOWTO." http://www.campin.net/newlogcheckl)

Nate's site is an all-around excellent source of Syslog-ng information.

http://swatch.sourceforge.net

Swatch home page. (Has links to the latest version, online manpages, etc.)

http://www.cert.dfn.de/eng/logsurf/

Logsurfer home page. (An alternative to Swatch, provided by CERT-DFN.) Friedl, Jeffrey E. F. Mastering Regular Expressions. Sebastopol, CA: O'Reilly, 1998.

http://defconX.wiremonkeys.org

The slideshow from my Defcon X talk "Stealthful Sniffing, Logging, and Intrusion Detection: Useful and Fun Things You Can Do Without An IP Address."