Back to listing

Cisco Wireless Lan Controller (WLC)

Content Pack

Cisco WLC Graylog Content Pack

dubsout
free!

Published

12 Sep 23:24

Last Push

14 Sep 17:47

Marketplace Rating

Discussion

3 Comments

Your Rating

Please sign in to rate this add-on.

Comments

infosectdk 7 months ago

I can't seem to get this to work, is this just for Graylog 2? I am using Graylog 3. When I import the plugin it is not persistent?

ma7cbesten 9 months ago

What about the common solution, fixed on the graylog machine:
iptables -t nat -A PREROUTING -p tcp --dport 514 -j REDIRECT --to 55514
iptables -t nat -A PREROUTING -p udp --dport 514 -j REDIRECT --to 55514

JulioQc almost 3 years ago

Not very practical to use port 10514 knowing Cisco doesn't allow using ports other than 514 and wildly assuming people use some technique to intercept and forward to port 10514. Otherwise, you can recycle the extractors provided as they are working fine to parse WLC logs. Which is nice :)

Please sign in to comment.

Back to listing