LinuxQuestions.org

Help answer threads with 0 replies.

Home

Forums

		LinuxQuestions.org > Blogs
unSpawn

Notices

Welcome to LinuxQuestions.org, a friendly and active Linux Community.

You are currently viewing LQ as a guest. By joining our community you will have the ability to post topics, receive our newsletter, use the advanced search, subscribe to threads and access many other special features. Registration is quick, simple and absolutely free. Join our community today!

Note that registered members see fewer ads, and ContentLink is completely disabled once you log in.

Are you new to LinuxQuestions.org? Visit the following links:
Site Howto | Site FAQ | Sitemap | Register Now

If you have any problems with the registration process or your account login, please contact us. If you need to reset your password, click here.

Having a problem logging in? Please visit this page to clear all LQ-related cookies.

GNU/Linux Basic Guide

This 255-page guide will provide you with the keys to understand the philosophy of free software, teach you how to use and handle it, and give you the tools required to move easily in the world of GNU/Linux. Many users and administrators will be taking their first steps with this GNU/Linux Basic guide and it will show you how to approach and solve the problems you encounter.

Click Here to receive this Complete Guide absolutely free.

Traffic and Process Id correlation with audit and ULOG on IA-32 Centos-5.7

Posted 11-20-2011 at 08:24 AM by unSpawn

Tags audit, pcap, pid, traffic, ulog

# ...being basically a clarification of dump all packets and list them according to the processes that either sent or received them and what command could display current running processes relating to eth0 so I can refer back to this when needed.

The question: generate an audit trail that includes captured traffic and process information.
The problem: when capturing packets no process information is stored.
Solution: correlation provides the "glue" between...

unSpawn

Moderator

Posted in Uncategorized

Views 1426 Comments 0 unSpawn is offline

unSpawn

Registered May 2001
Posts 24,970
Blog Entries 50

Recent Entries

Tag Cloud

cve-2013-0871 fail2ban ipset iptables -m recent libkeyutils.so.1.9 rkh sshd webhostingtalk

Search by Tag
Recent Visitors

All times are GMT -5. The time now is 06:23 PM.

Main Menu

(Con't)

My LQ

Write for LQ

LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.

Main Menu

Syndicate

Latest Threads

LQ News

Twitter: @linuxquestions
identi.ca: @linuxquestions
Facebook: @linuxquestions

Open Source Consulting | Domain Registration