# vi /etc/rsyslog.d/kismet.conf # MySQL Modul $ModLoad ommysql # 1 Tabelle - alles vom Kismet if $syslogtag startswith 'kismet:' then :ommysql:192.168.11.11,kismet,kismet,password # zweite Tabelle - nur Netzwerke und clients $template SystemEventsKismet,"insert into Incoming (FromHost, Facility, Priority, Message, DeviceReportedTime, ReceivedAt, InfoUnitID, SyslogTag ) values ('%HOSTNAME%', ' %syslogfacility%', '%syslogpriority%', '%msg%', '%timereported:::date-mysql%', '%timegenerated:::date-mysql%', %iut%, '%syslogtag%')",SQL #if $syslogtag startswith 'kismet:' then :ommysql:192.168.11.11,kismet,kismet,password;SystemEventsKismet :msg,contains,"new managed network" :ommysql:192.168.11.11,kismet,kismet,password;SystemEventsKismet :msg,contains,"new probe network" :ommysql:192.168.11.11,kismet,kismet,password;SystemEventsKismet :msg,contains,"new data network" :ommysql:192.168.11.11,kismet,kismet,password;SystemEventsKismet :msg,contains,"new ad-hoc network" :ommysql:192.168.11.11,kismet,kismet,password;SystemEventsKismet