LinuxQuestions.org

Go Job Hunting at the LQ Job Marketplace

Home

Forums

		LinuxQuestions.org > Blogs
unSpawn

Notices

Welcome to LinuxQuestions.org, a friendly and active Linux Community.

You are currently viewing LQ as a guest. By joining our community you will have the ability to post topics, receive our newsletter, use the advanced search, subscribe to threads and access many other special features. Registration is quick, simple and absolutely free. Join our community today!

Note that registered members see fewer ads, and ContentLink is completely disabled once you log in.

Are you new to LinuxQuestions.org? Visit the following links:
Site Howto | Site FAQ | Sitemap | Register Now

If you have any problems with the registration process or your account login, please contact us. If you need to reset your password, click here.

Having a problem logging in? Please visit this page to clear all LQ-related cookies.

GNU/Linux Basic Guide

This 255-page guide will provide you with the keys to understand the philosophy of free software, teach you how to use and handle it, and give you the tools required to move easily in the world of GNU/Linux. Many users and administrators will be taking their first steps with this GNU/Linux Basic guide and it will show you how to approach and solve the problems you encounter.

Click Here to receive this Complete Guide absolutely free.

Traffic and Process Id correlation with audit and ULOG on IA-32 Centos-5.7

Posted 11-20-2011 at 08:24 AM by unSpawn

Tags audit, pcap, pid, traffic, ulog

# ...being basically a clarification of dump all packets and list them according to the processes that either sent or received them and what command could display current running processes relating to eth0 so I can refer back to this when needed.

The question: generate an audit trail that includes captured traffic and process information.
The problem: when capturing packets no process information is stored.
Solution: correlation provides the "glue" between...

unSpawn

Moderator

Posted in Uncategorized

Views 1380 Comments 0 unSpawn is offline

unSpawn

Registered May 2001
Posts 24,779
Blog Entries 50

Recent Entries

Tag Cloud

audit trail bash logging bash patch cve-2013-0871 fail2ban ipset iptables -m recent libkeyutils.so.1.9 rkh sshd syslog webhostingtalk

Search by Tag
Recent Visitors

All times are GMT -5. The time now is 12:56 AM.

Main Menu

(Con't)

My LQ

Write for LQ

LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.

Main Menu

Syndicate

Latest Threads

LQ News

Twitter: @linuxquestions
identi.ca: @linuxquestions
Facebook: @linuxquestions

Open Source Consulting | Domain Registration