PacketViper can be configured to forward its logs to any 3rd party event manager via SYSLOG. This is useful should the customer wish to integrated PacketViper logging into a current solution for long term storage or leverage existing alerting and monitoring with the solution.

By default, PacketViper will send the Syslog messages on UDP port 514. To use a different port, append a colon and a port number to the IP address of the Syslog server. For example “192.168.1.234:9999” to send the messages on port 9999. Here is a list of facilities and log levels for the various events:

• PacketViper Events – Facility “local0”, various log levels

• Filter Events – Facility “kern”, log level “notice”

• System Messages – Various facilities and log levels

• IDS Events – Facility “local1”, log level “info”