CATOS & IOS syslog messages for security issues

[shahul-hameed]

Hi Everybody,

Can anybody help me.I want to know all the syslog messages for CATOS & IOS for security issues.Can anybody guide me where i can get these "syslog messages - CATOS & IOS.

your early responses will be highly appriciated.

Regards,

Shahul

[ecastellani2]

Hi Shahul,

Below are the 2 cisco URLS with the list of messages

you can get at syslog when configuring on the router (IOS) running the FW software (with "IP inspect" configured) and running the IDS software (with "IP Auditing" configured):

%FW- Error Messages From IOS Firewall Feature (IOS command) "IP Inspect", Cisco Marketing name CBAC:

http://www.cisco.com/univercd/cc/td/doc/product/software/ios120/12supdoc/12sems/emflash.htm#1025262

%IDS- Error Messages From IOS IDS Feature (IOS command) IP Auditing

http://www.cisco.com/univercd/cc/td/doc/product/software/ios122/122sup/122sems/semsvol1/emfgsrip.htm#934986

btw, on the cisco router you will need to make sure to have the below command to have the log messages sent to the syslog server:

!

logging "syslog ip address"

!

I would not know about the CAT IOS details.

hth,

Regards,

Emiliano Castellani

[shahul-hameed]

Hi Mr.Emiliano,

Thankyou for ur response.But did u read my question well.I need to know the syslog messages for CAT OS & IOS for security issues.

(ie.)The syslog message for CAT OS for security issues & the syslog message for cisco IOS for security issues.

If u cound help me plz do me this favour.

AWAITING AN EARLY RESPONSE,

Regards,

Shahul

[Kevin Dorrell]

Here it is for IOS:

http://www.cisco.com/application/pdf/en/us/guest/products/ps4324/c1624/ccmigration_09186a008037bc89.pdf

Here it is for CatOS:

http://www.cisco.com/en/US/products/hw/switches/ps4324/products_system_message_guide_book09186a00801e8b9e.html

If you want just the messages that are security related, 'fraid you'll have to go through each document and do the filtering yourself. After all, one man's operations message could be another man's security message - it's a matter of interpretation.

Finally, if you have a specific message that concerns you, try this tool:

http://www.cisco.com/pcgi-bin/Support/Errordecoder/index.cgi

Hope this helps.

Kevin Dorrell

Luxembourg

[shahul-hameed]

Hi Mr.Kevin Dorrell,

Thankyou very much for your quick response.

Reg. the IOS system messages(syslog message),the one in the link shows only for 4500 series.But what we are looking for is not only for 4500series but for all.If u could please help me in this manner it will be very helpful to me.Now half of my question got answered with your response.Once the other half gets answered i will mark as got answered full.Once again i thankyou verymuch for your quick response and expect the same.

Regards,

Shahul

[Kevin Dorrell · Accepted solution]

Shahul,

There is quite a lot of commonality between the various systems, but as far as I know there is no common message manual. The best I can do is tell you how to find the message manual for each system.

Starting from the "Switches" support page:

http://www.cisco.com/en/US/products/hw/switches/tsd_products_support_category_home.html

Select the switch series you are interested in, for example the 3550, and it will take you to a page like this:

http://www.cisco.com/en/US/products/hw/switches/ps646/tsd_products_support_series_home.html

Under "Troubleshooting and Alerts", you will see "Error and System Messages". Under that you will find a page like this:

http://www.cisco.com/en/US/products/hw/switches/ps646/products_system_message_guides_list.html

In this particular example, we have 8 different versions of the messages guide, depending on the version of the operating system. There must be over a hundred such documents if you follow the tree down, so much too many to list here.

Hope that is useful.

Kevin Dorrell

Luxembourg