Periodic Timestamp On Console (Ptoc); Event Logging - 3Com 3C10402B Administrator's Manual

Periodic Timestamp
on Console (PTOC)

Event Logging

Additionally, an attacker might generate false Syslog messages to give
misleading indications of status or of events. For example, an attacker
might stop a critical process on a machine, which might generate a
notification of exit. The attacker might subsequently generate a forged
notification that the process had been restarted. System administrators
might accept that misinformation and not verify that the process had
indeed been restarted.
In some cases, to avoid such message forgeries, you can disable the
Syslog port on the system when Syslog logging is disabled.
Caution: Syslog messages sent to the remote server do not employ
encryption standards.
The PTOC feature sends a timestamp to the system console at a set
interval. If the system experiences a problem of any kind, this timestamp
can help you identify when the problem occurred. If the time interval is
set to X minutes, it will print every X minutes, whether or not any other
messages are printing.
To configure the PTOC:
1 Log on to the NBX NetSet utility using the administrator login ID and
password.
2 Click Network Management > Syslog Settings.
3 Select a time value from the Periodic Timestamp on Console drop-down
list.
4 Click Apply.
You can view these event logs that the system maintains:
Adminlog — Tracks activities performed in the NBX NetSet utility
■
under the administrator login. The system never renames or deletes
the Adminlog. It continues to grow over time, but it is unlikely that the
size of the Adminlog file will ever grow to be a problem.
The system updates the adminlog file whenever system events occur,
such as:
When you enable or disable Supervisory Monitoring system-wide.
■
When you add, modify, or delete a domain.
■

Periodic Timestamp on Console (PTOC)

403