Check Cisco ACL's and send alert

[tetu_024]

Hi,

Is there a plugin that could monitor cisco acl's and sends an alert each time a change is done to an access list?

Kind Regards
Etienne

[egarnel]

The syslog plugin can do this via regexp
example:

Code: Select all

2009-07-25 	13:11:13 	 	54793: Jul 25 12:11:12.122 CST: %SEC-6-IPACCESSLOGP: list SERVERS denied udp 221.139.108.194(53) -> 197.2.2.150(37768), 1 packet

You can can then add an alert tool that triggers when a regexp is matched