D-Link Forums

The Graveyard - Products No Longer Supported => Routers / COVR => DIR-655 => Topic started by: moxmadrid on December 12, 2013, 10:40:59 PM

Title: DiR 655 and rSyslog
Post by: moxmadrid on December 12, 2013, 10:40:59 PM
Hi,

I'm pretty new to using D-Link devices so here is my question. (I hope this is not a limitation or something.)

I have an Ubuntu Server 12.04 LTS running rsyslog storing syslog files everyday to a local NAS.  I was able to set thing up right correctly,i can see data, but what I cannot see is traffic, specially http and other udp for streaming.  I was used to seeing websites and IP that a computer is going to with another brand but not with the syslog fiels im getting from my 655.

any thoughts on this would be great.
Title: Re: DiR 655 and rSyslog
Post by: FurryNutz on December 13, 2013, 07:08:13 AM
Link>Welcome! (http://forums.dlink.com/index.php?topic=41537.0)


I'm not fully sure if what your asking is supported using syslog on D-Link routers. Most of the data collection for D-Link routers using syslog is for diagnostic use and information of the routers processes and behaviors and mainly doesn't have that kind of data collection.

You may want to phone contact D-Link support and ask them what the syslog feature standard is and what it collects officially.

Let us know how it goes...
Title: Re: DiR 655 and rSyslog
Post by: FlashGordon on December 26, 2013, 05:43:20 AM
@moxmadrid

Just purchased an DIR-868L, partly on the basis that it would be able to provide useful FW logging information (external port scans and such). However, after trying every combination of log types and levels e.g. Firewall& Security\Information (which actually reverts to System\Information), found it records no such activity events on the WAN port. This seems a bit strange since the logs can be sent to a SYSLOG server, something that might normally be expected to be provided for recording such activity.

Would be very interested to see what sort of response you get back from DLINK support on standard syslog data set.
Title: Re: DiR 655 and rSyslog
Post by: FurryNutz on March 24, 2014, 12:17:28 PM
Any status on this?  ???
Title: Re: DiR 655 and rSyslog
Post by: FlashGordon on April 14, 2014, 01:07:21 AM
Apologies for late reply. When we got bridge mode (with 1.07?), I dropped separate a modem and hardware firewall in front of it.

D-Link support response was:
 
'It will only send the basic information to the syslog server, the same as you see in the log within the router. The router wont actually be able to send any external scans like this, on the consumer routers the logging is pretty much basic and you canīt get so much information from it. The log will show actions in the router hardware, blocked udp and tcp requests etc. If you are looking for more options a firewall might be a better option in this case.'.
Title: Re: DiR 655 and rSyslog
Post by: FurryNutz on April 14, 2014, 08:48:53 AM
Bridge mode came in on v1.02...

Thanks for sharing this info.

Quote from: FlashGordon on April 14, 2014, 01:07:21 AM
Apologies for late reply. When we got bridge mode (with 1.07?), I dropped separate a modem and hardware firewall in front of it.

D-Link support response was:
 
'It will only send the basic information to the syslog server, the same as you see in the log within the router. The router wont actually be able to send any external scans like this, on the consumer routers the logging is pretty much basic and you canīt get so much information from it. The log will show actions in the router hardware, blocked udp and tcp requests etc. If you are looking for more options a firewall might be a better option in this case.'.