23. 12. 2024
APM, Development, Log-SIEM, NetEye
Release of NetEye Configtool version 1.4.5
The update concerns most of all the SNMP trap handler part of the configtool.
Beside a few bug fixes and performance tweaks it includes some new functionalities as listed below.
New or improved features:
- configuring livestatus to send Nagios Host/Service States improves performance of the traphandler
- new improved default MessageConsole message format for the trap handler. The message body itself now includes the timestamp and full trap line-numbered message
- additional options for the MessageConsole rules of the trap handler. You can now specify also the servicetemplate to use for a specific trap within a trap rule. This options can be modified by adding/editing a MessageConsole trap ruble and clicking on the configure icon (bottom-left) of the dialog
- monarch database connection settings integrated in the setting page of the trap handler
- several user interface (web frontend) changes, e.g. improved (visual) support for Internet Explorer rendering, the rule table displays the number of advanced rules (also the trap dialog at the bottom), changes in the setting page layout and many more
Overview of the features offered by the trap handler:
- receiving, parsing and interpreting of SNMP traps
- send messages to the MessageConsole with numerous options
- set/update Nagios host and service states
- execute some arbitrary commands on trap receival or mark specific traps to be always ignored
- advanced rules are used to further filter traps and extract data (including substrings) from a specific line of the SNMP trap message
- archive SNMP traps and cleanup this archive
- allow trap messages to match several (more than one) rule
- use predefined variables or define your own variable. They can be used for instance in the MessageConsole message body, subject, etc.
- fast setup of a new trap rule by duplicating the properties of an existing one
Supported NetEye Versions: 3.2
Thomas Forrer
Team Leader Research & Development at Würth Phoenix
Hi folks!
I began loving computer since 1994, it was still the time of windows 3.1. Immediately I learned starting DOS games from the command promt, and while typing some white text on black background I felt like some hackish dude in a hollywoodian movie.
Later during the studies at the university, I discovered the magic world of opensource, and it was love at first sight. Finally I got rid of BSOD's =)
I love everything that is connected to some network, especially in a security perspective.
My motto is:
"With motivation, nothing is impossibile. It only requires more time."
Author
Latest posts by Thomas Forrer
20. 09. 2021
ctf-writeups, SEC4U
RomHack CTF 2021: Table of Contents Writeup