syslog工具(win10可以用)

<?xml version="1.0" encoding="GB2312"?> <root> <Sample Name="Juniper IC">Info AUT24414 2011-12-20 17:19:36 - IC4000-2_22 - [192.168.11.12] lx-minchao(TEMPORARY)[Waiyuan BOSS] - Agent login succeeded for lx-minchao/TEMPORARY from 192.168.11.12.</Sample> <Sample Name="Juniper ISG">&lt;147&gt;Nov 28 11:10:03 61.142.110.254 11/28/2011 11:10:03 CHN dosProtection: Flow is suspicious: GigabitEthernet0/0.2439 for control protocol: IP TTL Expired source MAC 0023.04fd.86b5 with rate 52 pps</Sample> <Sample Name="Juniper SRX">&lt;150&gt;Jun 1 09:27:25 61.145.193.203 login: %AUTH-6-LOGIN_INFORMATION: User confile logged in from host 59.37.66.155 on device ttyp2</Sample> <Sample Name="Cisco ASA">&lt;134&gt;Oct 16 2008 10:02:40: %ASA-6-302016: Teardown UDP connection 512086 for inside:100.0.2.94/514 to NP Identity Ifc:100.0.1.68/514 duration 922:50:43 bytes 4290363365</Sample> <Sample Name="Cisco PIX">&lt;163&gt;Oct 16 2009 11:37:05: %PIX-3-305006: portmap translation creation failed for tcp src inside:10.224.153.10/3478 dst WEB:10.223.3.103/48001</Sample> <Sample Name="Venus 天阗IDS">sub:ICMP_PING_事件;se:10;sr:192.168.1.167;sport:0;dest:192.168.3.49;dport:0;proto:null;param:nic=0_;time:2012-1-12_15:17:0; sub:ICMP_PING_事件;se:10;sr:192.168.1.167;sport:0;dest:192.168.3.50;dport:0;proto:null;param:nic=0_;time:2012-1-12_15:17:0; sub:ICMP_PING_事件;se:10;sr:192.168.1.167;sport:0;dest:192.168.3.51;dport:0;proto:null;param:nic=0_;time:2012-1-12_15:17:0; sub:ICMP_PING_事件;se:10;sr:192.168.1.167;sport:0;dest:192.168.3.52;dport:0;proto:null;param:nic=0_;time:2012-1-12_15:17:0; sub:ICMP_PING_事件;se:10;sr:192.168.1.167;sport:0;dest:192.168.3.53;dport:0;proto:null;param:nic=0_;time:2012-1-12_15:17:0; sub:ICMP_PING_事件;se:10;sr:192.168.1.167;sport:0;dest:192.168.3.54;dport:0;proto:null;param:nic=0_;time:2012-1-12_15:17:0; sub:ICMP_PING_事件;se:10;sr:192.168.1.167;sport:0;dest:192.168.3.55;dport:0;proto:null;param:nic=0_;time:2012-1-12_15:17:0; sub:ICMP_PING_事件;se:10;sr:192.168.1.167;sport:0;dest:192.168.3.56;dport:0;proto:null;param:nic=0_;time:2012-1-12_15:17:0; sub:ICMP_PING_事件;se:10;sr:192.168.1.167;sport:0;dest:192.168.3.57;dport:0;proto:null;param:nic=0_;time:2012-1-12_15:17:0; </Sample> <Sample Name="Juniper NetScreen">&lt;129&gt;NS-ISG-1000-1: NetScreen device_id=NS-ISG-1000-1 [Root]system-alert-00017: Address sweep! From 220.181.5.60 to 59.37.52.50, proto 1 (zone Untrust int ethernet1/1). Occurred 1 times. (2012-05-07 20:39:05)</Sample> <Sample Name="Tomcat">192.168.56.112 - - [19/May/2012:02:37:34 +0800] "GET /smp/ HTTP/1.1" 200 5581</Sample> <Sample Name="Websphere">[6/12/12 14:24:51:972 GMT+08:00] 00000117 SystemErr R at com.ibm.ws.webcontainer.servlet.ServletWrapper.service(ServletWrapper.java:989)</Sample> <Sample Name="WebLogic">2005-05-02 15:12:31 log file C:\diablodomain\servers\myserver\logs\myserver.log will be rotated.Reopen the log file if tailing has stopped.This can happen on some platforms like Windows 170017 Info</Sample> <Sample Name="Linux">&lt;23&gt;sshd[23538]: Received disconnect from ::ffff:192.168.17.50: 11: Disconnect requested by Windows SSH Client.</Sample> <Sample Name="Windows">Microsoft: Windows time=2009-12-22 10:51:54 hostIp=192.168.114.233 type=Security user=SYSTEM domain=NT AUTHORITY source=Security hostName=C81769O4OK8YNUG level=4 subType=成功审核 eid=592 class=详细跟踪 msg=已经创建新的过程:; 新的进程 ID: 2916; 映像文件名: </Sample> <Sample Name="Oracle">oracle-ua: [ID 561261 uucp.error] ORA-01110: data file 6: '/oracle/app/product/10.2.01/db_1/dbs/SMC.dbf</Sample> </root>