Does anyone have a rule list for HP and 3Com switches (similar to the Cisco-IOS rule list)? I have 2910, 5406, etc. HP switch models, as well as 3COM (bought by HP) switches. I am sending syslog switch logs to my ossec server and reading them from /var/log/messages. Is this the best way to collect switch logs?
John John Walker, CISSP, GIAC-GAWN Savannah River Nuclear Solutions Savannah River Site PO Box A Aiken, SC 29808
