Link to home
Start Free TrialLog in
Avatar of twahelpdesk
twahelpdesk

asked on

How to pull log files from Cisco 2651

Our network recently crashed due to some possible changes on our Cisco 2651 router. It took about 3 hours to fix the issue, but we never found out what caused it. We basically had to upload a back up of our configuration to the router for it to work again. We would like to pull the syslog messages off the router but we are not really sure how to so this. We have tried but there is no clear cut step-by-step way to acheive this. Also, is it possible to log telnet sessions and trace them back to an IP address? And one last question, will the logs tell us what changes were made and where the changes came from (IP, username, etc.) Any help would be greatly appreciated!
Avatar of Freya28
Freya28
Flag of United States of America image

the buffer logs have most probably been overwritten by now.  not much there you can.  For future occurances, set up a syslog server and store the logs.  the syslogs will tell you source destination and timestamp.
Avatar of twahelpdesk
twahelpdesk

ASKER

How would I set a syslog server? What is needed to accomplish this?
ASKER CERTIFIED SOLUTION
Avatar of rsivanandan
rsivanandan
Flag of India image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
this should give some insight as to what traffic is flowing.