Device Promiscuous Mode

Classification

Rule Name	Rule Type	Common Event	Classification
Device Promiscuous Mode	Base Rule	Interface Entered In Promiscuous(Sniffing) Mode	Information
Device Entered Promiscuous Mode	Sub Rule	Interface Entered In Promiscuous(Sniffing) Mode	Information
Device Left Promiscuous Mode	Sub Rule	Mode Changed	Information

Mapping with LogRhythm Schema  

Device Key in Log Message	LogRhythm Schema	Data Type
N/A	<severity>	Text\String
N/A	<dname>	Text\String
N/A	<dinterface>	Text\String
N/A	<process>	Text\String
N/A	<tag1>	Text\String

×