Can i send "show conn to syslog server"?

Alvaro Perez Unzueta · ‎08-09-2011

Hello,

Can i send "show conn" to syslog server? for example:

5067 1 in TCP 80 151.101.100.111:6495 50.80.1.100:22 ESTAB

5068 1 out TCP 70 172.16.28.223:22 50.70.1.20:1197 ESTAB

5069 1 in TCP 80 151.101.100.111:6495 50.80.1.100:22 ESTAB

5070 1 out TCP 70 151.101.121.96:22 50.70.1.20:1213 ESTAB

5071 1 in TCP 80 151.101.100.111:6496 50.80.1.100:22 ESTAB

5072 1 out TCP 70 172.16.28.223:22 50.70.1.20:1223 ESTAB

5073 1 in TCP 80 151.101.100.111:6496 50.80.1.100:22 ESTAB

5074 1 out TCP 70 151.101.121.96:22 50.70.1.20:1250 ESTAB

5075 1 in TCP 80 151.101.100.111:6496 50.80.1.100:22 ESTAB

5076 1 out TCP 70 172.16.28.223:22 50.70.1.20:1268 ESTAB

5077 1 in TCP 80 151.101.100.111:6496 50.80.1.100:22 ESTAB

5078 1 out TCP 70 151.101.121.96:22 50.70.1.20:1276 ESTAB

5079 1 in TCP 80 151.101.100.111:6496 50.80.1.100:22 ESTAB

5080 1 out TCP 70 172.16.28.223:22 50.70.1.20:1278 ESTAB

5081 1 in TCP 80 151.101.100.111:6496 50.80.1.100:22 ESTAB

5082 1 out TCP 70 151.101.121.96:22 50.70.1.20:1296 ESTAB

5083 1 in TCP 80 151.101.100.111:6496 50.80.1.100:22 ESTAB

5084 1 out TCP 70 172.16.28.223:22 50.70.1.20:1305 ESTAB

5067       1 in TCP    80   151.101.100.111:6495       50.80.1.100:22        ESTAB
5068       1 out TCP   70   172.16.28.223:22              50.70.1.20:1197       ESTAB
5069       1 in TCP    80   151.101.100.111:6495       50.80.1.100:22        ESTAB
5070       1 out TCP   70   151.101.121.96:22            50.70.1.20:1213       ESTAB
5071       1 in TCP    80   151.101.100.111:6496       50.80.1.100:22        ESTAB
5072       1 out TCP   70   172.16.28.223:22              50.70.1.20:1223       ESTAB
5073       1 in TCP    80   151.101.100.111:6496       50.80.1.100:22        ESTAB
5074       1 out TCP   70   151.101.121.96:22            50.70.1.20:1250       ESTAB
5075       1 in TCP    80   151.101.100.111:6496       50.80.1.100:22        ESTAB
5076       1 out TCP   70   172.16.28.223:22              50.70.1.20:1268       ESTAB
5077       1 in TCP    80   151.101.100.111:6496       50.80.1.100:22        ESTAB
5078       1 out TCP   70   151.101.121.96:22            50.70.1.20:1276       ESTAB
5079       1 in TCP    80   151.101.100.111:6496       50.80.1.100:22        ESTAB
5080       1 out TCP   70   172.16.28.223:22              50.70.1.20:1278       ESTAB
5081       1 in TCP    80   151.101.100.111:6496       50.80.1.100:22        ESTAB
5082       1 out TCP   70   151.101.121.96:22            50.70.1.20:1296       ESTAB
5083       1 in TCP    80   151.101.100.111:6496       50.80.1.100:22        ESTAB
5084       1 out TCP   70   172.16.28.223:22              50.70.1.20:1305       ESTAB

Regards,

Álvaro

chrhiggi · ‎08-09-2011

Alvaro-

You cannot log the output commands to the syslog server, no. You could get the same sort of information by logging connection creation and descruction - but if the amount of traffic cps is high, you will flood the logging and possibly spike the CPU. The better way to do this would be to use the XML API or run a script on a terminal that logs in and runs the command.

Regards,

Chris Higgins