HAProxy and MySQL Checks

HAProxy and MySQL Checks I wanted to throw this out in case anyone else has a need for such a setup to use L7 for node up/down when load balancing MySQL with HAProxy. All you have to do is run Continue reading

Homebrew NAS for vSphere

Homebrew NAS for vSphere So for the past 4 years or so I have been running Nexenta 3.x for my lab NAS; which has been working great, but I was at a point of having to rebuild my latest build Continue reading

Cisco ASA Logstash Parsing

Screen Shot 2014-12-11 at 9.58.47 PM

Cisco ASA Logstash Parsing I recently had an opportunity to get around to creating some Cisco ASA parsing for logstash to detect some abnormal activity on the network. So now that I have created the parsing and have to say Continue reading

Nexenta Jumbo Frames

Nexenta jumbo frames I Wanted to go through and enable jumbo frames for my lab iSCSI storage which is running on Nexenta CE (For about 4 years now). So how do you do this? Login to your Nexenta WEBUI and Continue reading

VMware NSX – L2 Bridge Gateway Whiteboarding Session

VMware NSX – L2 Bridge Gateway I wanted to share this whiteboarding session as my first attempt. I am trying a new platform that I have been wanting to explore and hope it is beneficial. I apologize for the poor Continue reading

PFSense Snort Logstash

I have been working on getting some detailed logging from Snort logs generated through PFSense and thought I would share them. This can also be modified to work with a Snort setup not running on PFSense as well. Can also Continue reading

VMware NSX Firewall Logging with Logstash

So the past day or so I have been working on getting some good detail from my NSX Edge’s (ESG and DLR) and I have been able to get them working very well. The Kibana dashboard looks great too. So Continue reading

Bro-IDS Logstash Parsing

I have spent the past several days working with Bro-IDS and Logstash parsing and wanted to share this with anyone else who may be doing the same and needs some decent parsing. Some pieces of this I have taken from Continue reading

IP Reputation Lookups with Logstash

I had a great question yesterday about how to configure Logstash to integrate IP reputation lookups within Logstash and Kibana without having to copy and paste an IP address and etc. I thought this was a great idea and one that Continue reading

Suricata IDS/IPS VMXNET3

As part of a bigger post coming soon I have been using Suricata IDS and my Logstash server has been getting hammered and unable to keep up (running a single node setup) but finally figured out why this was happening so I Continue reading