passlogd

Passlogd is a sniffer designed specifically for capturing syslog messages. This feature makes it ideal for performing backup logging on a machine that has no open ports. It is a practical solution in scenarios where the log server is compromised or where sifting through a massive amount of sniffer logs is not desirable.

Currently, Passlogd is under development, and users can expect bugfixes, new features, and other improvements to be added over time. The developer encourages users to report any bugs they encounter while using the software and to submit patches where necessary.

Passlogd offers several useful command line options, including the ability to display an informative message (-h), log captured messages to the local syslog (-s), and reverse lookup IP addresses (-r). Other options include debug mode (-d), the ability to ignore packets from specific interfaces (-i), and the power to listen for syslog packets on a specific port (-p) or interface (-e). The default log location is /var/log/passlog (-f), with the option of using the syslog format in the logfile (-S).

Overall, Passlogd is a capable, purpose-driven software that provides useful functionality for capturing syslog messages. Its high level of customization and flexibility make it a compelling tool for network administrators looking to streamline their logging processes.