ntopng/tests/syslog/README.test
2021-03-10 11:59:01 +01:00

22 lines
649 B
Text

Suricata Test
-------------
The suricata.log file contains sample syslog output from Suricata,
it can be used to test the Suricata log ingestion in ntopng.
As first step please configure ntopng as explained in the user's
guide at:
https://www.ntop.org/guides/ntopng/advanced_features/suricata.html?highlight=suricata#ntopng-configuration
Example for the impatient:
ntopng -i syslog://127.0.0.1:9999
As second step, use netcat to replay the log to the configured
port of the ntopng host:
cat suricata.log | netcat 127.0.0.1 9999
The sample log file contains both flows and alerts (e.g. an alert
about a trojan AlienSpy RAT is present).