go_syslog_sniffer

README

Syslog sniffer written in Go

Listens for UDP/TCP traffic, counts the number of packages and takes a sample of the Syslog events and outputs the result in JSON.

Install

Dependencies

OS packages

sudo apt install golang-go
sudo apt install libpcap-dev

Golang libraries

go get github.com/google/gopacket
go get github.com/google/gopacket/layers
go get github.com/google/gopacket/pcap

Compile

make build

Commandline arguments

Argument	Description	Default
-i	Interface to listen on	eth0
-p	Port to listen for	514
-t	Number of seconds to listen on interface	60