Re: [swinog] Log centralisation / mining

2008-01-21 Diskussionsfäden Raffael Marty
On Jan 21, 2008, at 3:45 AM, Roman Hochuli wrote: Hello Raffy Splunk. Definitely Splunk ;) > -- Raffael Marty Chief Security Strategist @ Splunk> Security Visualization: http://secviz.org raffy.ch/blog I see. A totally unbiased position. ;) I assumed th

RE: [swinog] Log centralisation / mining

2008-01-21 Diskussionsfäden Reza Kordi
The most professional solution on market is surely EMC/RSA envision, if you see it you won't want to bother with anything else. If you wanna a demo let me know of list. Best Regards Mit freundlichen Grüssen Reza Kordi Managing Director Clue AG Blegistrasse 9 CH - 6340 Baar/Zug tel. +41 41 2

RE: [swinog] bluewin not accepting email at the moment

2008-01-21 Diskussionsfäden Steven.Glogger
>hehe.. mx49 is just a tarpit server ;-) oh.. now every spammer will exclude this host ,-) -steven -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Adrian Ulrich Sent: Monday, January 21, 2008 3:07 PM To: [EMAIL PROTECTED]; Andreas Weiler Cc: [EMAIL PRO

Re: [swinog] bluewin not accepting email at the moment

2008-01-21 Diskussionsfäden Adrian Ulrich
Hi Andreas, > From my side it looks like bluewin mailserver is not accepting any > email at the moment. We had some funky problems with our loadbalancers this morning. > (delivery temporarily suspended: connect to mx49.bluewin.ch[195.186.18.99]: > Connection timed out) hehe.. mx49 is just a

Re[2]: [swinog] bluewin not accepting email at the moment

2008-01-21 Diskussionsfäden Andreas Weiler - Kabelfernsehen Boedeli AG
Looks like all email in mailq to @bluewin.ch have reached their destination in the meantime. Thank you for your information. Andreas Weiler Kabelfernsehen Boedeli AG Am Montag, 21. Januar 2008 um 11:43 schrieben Sie: SGsc> hm... not quite right.. SGsc> there are 4 mx for bluewin: SGsc> ;;

Re: [swinog] Log centralisation / mining

2008-01-21 Diskussionsfäden Roman Hochuli
Hello Raffy Splunk. Definitely Splunk ;) > -- Raffael Marty Chief Security Strategist @ Splunk> Security Visualization: http://secviz.org raffy.ch/blog I see. A totally unbiased position. ;) -- Best regards, Roman Hochuli Operations Manager nexellent

RE: [swinog] Some of you might agree with this

2008-01-21 Diskussionsfäden Per Jessen
Robert Bertschinger wrote: > Per, > > What kind of subhect line is that??? On the first sight it looks just > like a typical, meaningless Spam-Subject line ... > > Anyway, thanks for the link and yes I do agree :-) Hi Robert (and everyone) I didn't want to offend anyone here - not everyone agr

RE: [swinog] Some of you might agree with this

2008-01-21 Diskussionsfäden Robert Bertschinger
Per, What kind of subhect line is that??? On the first sight it looks just like a typical, meaningless Spam-Subject line ... Anyway, thanks for the link and yes I do agree :-) Cheers Robert -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Per Jesse

RE: [swinog] bluewin not accepting email at the moment

2008-01-21 Diskussionsfäden Steven.Glogger
hm... not quite right.. there are 4 mx for bluewin: ;; ANSWER SECTION: bluewin.ch. 20947 IN MX 10 mxbw.bluewin.ch. bluewin.ch. 20947 IN MX 42 mxzhh.bluewin.ch. bluewin.ch. 20947 IN MX 42 mxzhb.bluewin.ch. bluewin.ch.

[swinog] bluewin not accepting email at the moment

2008-01-21 Diskussionsfäden Andreas Weiler - Kabelfernsehen Boedeli AG
From my side it looks like bluewin mailserver is not accepting any email at the moment. (delivery temporarily suspended: connect to mx49.bluewin.ch[195.186.18.99]: Connection timed out) Can someone confirm this, or might it only be on our side. Andreas Weiler Kabelfernsehen Boedeli AG __

[swinog] Some of you might agree with this

2008-01-21 Diskussionsfäden Per Jessen
I have just read and signed the online petition: "Use free standards" hosted on the web by PetitionOnline.com, the free online petition service, at: http://www.PetitionOnline.com/lortow3/ I personally agree with what this petition says, and I think you might agree, too. If you can spare

Re: [swinog] KVM-over-IP

2008-01-21 Diskussionsfäden Kirill Ponazdyr
Steven, >From what I have seen so far, the most portable solution are the KVMs from Startech. They got it all, VNC, JAVA client which works with any Java Capable OS, Radius for Auth and so on. Unfortunately they do not make a CAT5 KVM :( but as others have adivised you could buy a KVM to IP brid

Re: AW: [swinog] Log centralisation / mining

2008-01-21 Diskussionsfäden Rainer Duffner
Michele Capobianco schrieb: > Too bad that Splunk does not run on Windows :( > > We are a Windows Company and if i tell them that we want to run a Linux > Server, our Management would kill me ;) > Then, don't expect a free (OSS) solution ;-) I'd look into some of the UTM (Unified Threat Manag

Re: [swinog] Log centralisation / mining

2008-01-21 Diskussionsfäden Peter Baumann
On Mon, 2008-01-21 at 08:47 +0100, Marcel Prisi wrote: > Hi all, > > I am looking for a good log centralisation / alerting / mining solution. > I know about syslog-ng / rsyslog+phpLogCon, I'd like something more > complete ... Hi, If you need a commercial solution and need to be compliant (SOX,

Re: AW: [swinog] Log centralisation / mining

2008-01-21 Diskussionsfäden Raffael Marty
Too bad that Splunk does not run on Windows :( Not yet! There is a preview version out that runs on Windows, but it's still a bit unstable. By the end of the month, we should have something that is releasable! Hang tight or try the preview! Cheers -raffy We are a Windows Company and

RE: [swinog] KVM-over-IP

2008-01-21 Diskussionsfäden Steven.Glogger
ciao alex ich brauch hardware, keine software geschichte, wenn der windows server spackt... ,-) -steven -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Faes, Alexander Sent: Monday, January 21, 2008 9:24 AM To: [EMAIL PROTECTED] Subject: AW: [swinog] K

AW: [swinog] KVM-over-IP

2008-01-21 Diskussionsfäden Rene Caspar
Hi Steven We use the LevelOne IP KVM -> http://www.level-one.de/products3.php?idu=7030&id=1891 No problems so far. cu René -Original Nachricht- From: [EMAIL PROTECTED] Date: Mon, 21 Jan 2008 09:12:14 +0100 To: [EMAIL PROTECTED] Subject: [swinog] KVM-over-IP > hi boys & girls > > i'm

AW: [swinog] Log centralisation / mining

2008-01-21 Diskussionsfäden Michele Capobianco
Too bad that Splunk does not run on Windows :( We are a Windows Company and if i tell them that we want to run a Linux Server, our Management would kill me ;) Is there anything out in the Net for Log management witch is Windows Based? Regards Capo -Ursprüngliche Nachricht- Von: [EMAIL

RE: [swinog] KVM-over-IP

2008-01-21 Diskussionsfäden Viktor Steinmann
Sorry, just found out, that they're EOL. But maybe there's one on Ebay ;-) Cheers, Viktor > http://h18000.www1.hp.com/products/servers/proliantstorage/rac > k-options/scs/ > index-kvm.html ___ swinog mailing list swinog@lists.swinog.ch http://lists.swi

AW: [swinog] KVM-over-IP

2008-01-21 Diskussionsfäden Faes, Alexander
Tschau Steven, Hesch gut ? Au scho lang nuem ghört und gseh ;) lueg chasch au mit sowas was afange.. http://www.opengear.com/virtualkvm.html Mit freundlichen Grüssen Alexander Faes Professional Services // Network Engineer BECHTLE IT-SYSTEMHAUS ZÜRICH tel: +41 43 333 73 02 gsm: +41 79 57

RE: [swinog] KVM-over-IP

2008-01-21 Diskussionsfäden Viktor Steinmann
We use the HP solution, because it adds only one more Cat5 Cable per Server to the racks, whereas other solutions are just a nightmare to keep your cabling decent looking. http://h18000.www1.hp.com/products/servers/proliantstorage/rack-options/scs/ index-kvm.html Pricing is OK IMHO, YMMV Cheers,

Re: [swinog] KVM-over-IP

2008-01-21 Diskussionsfäden Silvan Gebhardt
Hello Steven then dont search for a complete solution. Get a normal, expandable KVM, and there exists some VGA etc to IP Converters - so build it from two devices. thats cheaper I will search through my bookmarks now silvan Am 21.01.2008 um 09:12 schrieb <[EMAIL PROTECTED]>: hi boys &

[swinog] KVM-over-IP

2008-01-21 Diskussionsfäden Steven.Glogger
hi boys & girls i'm looking for a nice (and of course cheap) solution for a KVM-over-IP (VGA,USB for keyboard, mouse; some mice need PS/2 adapters) switch for my windows servers. a port capacity >=16 ports would be appreciated. some VNC solution would be great. does someone has a good experience w

Re: [swinog] Log centralisation / mining

2008-01-21 Diskussionsfäden Raffael Marty
Splunk. Definitely Splunk ;) If you have any questions or you want to talk more about your use- cases, I am happy to have a chat with you. On a serious note, I think you should try it. And it is free up to 500MB/day! That's quite a bit. After that it's fairly reasonably priced! One other t

RE: [swinog] Log centralisation / mining

2008-01-21 Diskussionsfäden Marcel Prisi
Le lundi 21 janvier 2008 à 08:56 +0100, Reza Kordi a écrit : > Hi! > > Give us more details... > > What is your log volume? How many systems? > For now, 20-30 systems (growing), and we also use syslog from some of our applications. > Are you looking for a opensource solution or a commercial on

Re: [swinog] Log centralisation / mining

2008-01-21 Diskussionsfäden Tobias Koenig
Hi There is actually a free version of splunk, with a few restrictions though (no access controls). But you still can handle up to 500MB Log per day and it's quite easy to install and configure. The search engine seems to be quite powerful, we run it on a debian system with 256mb ram, got ap