You Are Here : Forums Sunday, July 06, 2008
     
Activeworx.org Forums
 
  Forum  Other Forums  Honeynet Securi...  IP address doesn't display properly in HSC console
Previous Previous
 
Next Next
New Post 1/12/2007 6:38 AM
  gopinath
2 posts
No Ranking


IP address doesn't display properly in HSC console 

Hi and happy new year everyone,

 

I am very new to this list. I have my syslog server running syslog-ng 1.6.11 which capture logs from differnet network devices. I have installed mysql 4.1.2 in my PC and also installed HSC 2.0.64. Now everything goes fine except the "Host field" displays the IP in a jumbled way. Sometimes 0.0.0.0. I have tried altering my event database table i.e., my logs table in syslog server. Also tried altering the server & ipcache table in primary database (in Mysql installed in my P.C). But still i couldn't rectify the problem. Could anyone please help me out.

 

Thanks in advance.

 

Regards,

Gopinath.U

 
New Post 1/12/2007 11:52 AM
  Jeff Dell
219 posts
www.activeworx.com
1st Level Poster


Re: IP address doesn't display properly in HSC console 

You need to convert the ip address to an integer. This is done to increase performance so instead of searching for a string field, you are searching for an integer. To do this you will need to use the inet_aton() internal MySQL function. If you have an insert to load data in the database.. you can use something like the following:

 

INSERT INTO logs (host, facility, priority, level, tag, timestamp, program, msg) VALUES ( INET_ATON('$HOST'), '$FACILITY', '$PRIORITY', '$LEVEL', '$TAG', '$YEAR-$MONTH-$DAY $HOUR:$MIN:$SEC', '$PROGRAM', '$MSG')

 

More information about this:

http://dev.mysql.com/doc/refman/5.0/en/miscellaneous-functions.html

 

Cheers,

Jeff

 

 

 

 

 
New Post 1/16/2007 7:51 AM
  gopinath
2 posts
No Ranking


Re: IP address doesn't display properly in HSC console 

Thanks Jeff,

 

It worked out for me. Jeff, is it possible to have the host names instead of IP address in the HSC console. Moreover is it possible to modify (add/delete/change name) the default field names in HSC.

 

Cheers,

Gopinath.U

 
New Post 1/16/2007 11:24 AM
  Jeff Dell
219 posts
www.activeworx.com
1st Level Poster


Re: IP address doesn't display properly in HSC console 
You have to use the IP Address. This is done for consistency throughout the application and for performance.

You also can't add/delete/change any default fields.

Cheers,
Jeff
 
Previous Previous
 
Next Next
  Forum  Other Forums  Honeynet Securi...  IP address doesn't display properly in HSC console
 
 
Copyright 2000-2007 by Activeworx, Inc.
All trademarks and copyrights on this page are owned by their respective owners.