Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I'm looking for something i can install on my machine and get the logs from a couple Cisco routers. Whats out there that can connect to my routers and pull logs for quick access without having to go into the SDM?

It would be nice to see some graphs in re: to traffic, attacks, etc.

EDIT: Preferably Windows based. :)

share|improve this question

closed as off-topic by kasperd, MadHatter, Michael Hampton Oct 16 '14 at 23:15

This question appears to be off-topic. The users who voted to close gave this specific reason:

If this question can be reworded to fit the rules in the help center, please edit the question.

up vote 5 down vote accepted

For you basic logs as Cian Says any unix box will do. Just setup your syslog to accept local4 and write that to a file (local4 is the default if i remember correctly, but it is configurable).

As far as graphs, you can use MRTG or cacti. Just setup SNMP on the routers and you should be able to pull interface graphs. The other option is netflow because you are using routers. I tend to only use netflow for one off troubleshooting because switches and PIX/ASA devices don't support it and I like to have all my interface graphs accessible through one interface.


Setting up the syslog to accept syslog messages from the Cisco and have the Cisco send them.

On your syslog server you will need to go into /etc/syslog.conf and make the following changes:

local4.*          /var/log/network.log

This tells the syslog server to send all messages it recieves on the local4 facility all priorities to the file /var/log/network.log You can then access that log using the normal unix utilities, cat/more/less/grep - you'll find grep to be the most useful.

One thing to note , you may need to turn on remote logging on your syslog server. This seems to vary between distros so your best bet is to choose a distro and search for how they do it. Personally i recommend ubuntu server.

I normally set the following commands to turn on logging on my cisco devices:

 logging facility local4
 logging <host to log to>
 logging on

For some further reading on syslog here is the Syslog Website

share|improve this answer
I had thought about a Cacti box, which would probably get setup in a VM, since i have no available hardware around to install on separately. Additionally, i have zero unix experience, FYI. – DanBig Jul 22 '09 at 14:42
Ahh... Well this is actually a good way to get your feet wet with unix :) you should go with cacti then, it's a webapp so it should be pretty simple for you to get running. See my edit for some syslog explaination. – Zypher Jul 22 '09 at 15:01
I think i will setup a Cacti box, thanks! – DanBig Jul 22 '09 at 15:36
Will Cacti run on SQL, instead mf MySQL? – DanBig Jul 22 '09 at 16:48

Forgot to add the traffic monitor.

I use PRTG from Paessler

PRTG Traffic

share|improve this answer

I use two free products to take care of this

For Syslog I use

Kiwi Syslog Server

Hope this helps

share|improve this answer

Ciscos can log to a syslog server. Any unix box should come with one.

edit: You set this up with logging host and then logging on, in config mode.

share|improve this answer

All in one open-source monitoring solution for cisco: jffnms

Uses syslog and snmp, and is also able to monitor a tacacs server.

share|improve this answer

Not the answer you're looking for? Browse other questions tagged or ask your own question.