Peter@BalaBit

Training dates

Monday, August 22, 2011 @ 09:08 AM Author: Höltzl Péter
New training dates are available:
  • September 20-22: SCB training in Moscow (yes! this is a 3-day training!)
  • October 11-12: SCB training in Münich
  • November 23-24: syslog-ng PE in Münich
  • November 25: SSB in Münich
All attendees are welcome. Please submit at the trainings page!

Online exams available

Friday, February 11, 2011 @ 03:02 PM Author: Höltzl Péter
I am glad to announce, that we have refreshed the exam system since 1011. All students can take exam the exam online. What kind of exams are available?
  • Zorp maintener (BCZA): 50 questions. You need to answer well at least 30.
  • Zorp expert (BCZE): 100 questions, maximum 150 points (difficult questions are 2 points). You need to ...

Vizualize your syslog messages

Monday, November 29, 2010 @ 11:11 AM Author: Höltzl Péter
I have created a very simple munin script (plugin;-), which simply displays our message classes and it vizualizes what is happening on our system. Nothing serious! It simple counts how many message was created since the last run. You can generate such figures: This figure shows a ...

ITBN 2010

Friday, October 22, 2010 @ 02:10 PM Author: Höltzl Péter
This year ITBN was very good, and not only because I was happy with the prize. Of course I was presenting: I was talking about importance of trusted infrastructures in log analysis projects, and the whole section had a very nice upsweep. Before my presentation Mikós Márton (Kürt) spoke about log analysis (how they deploy ...

IT Security Specialist of the Year 2010

Friday, October 22, 2010 @ 02:10 PM Author: Höltzl Péter
I have awarded the "[IT Security] Specialist of the Year 2010" prize at ITBN, whatewer it means;-D The pritze was given first this year, and I really think we need such prizes. Next year (if I can advise) I would change the method of the votes. ...

Hactivity 2010

Friday, October 22, 2010 @ 12:10 PM Author: Höltzl Péter
This year I also take part of the conference Hactivity. I do not really liked the placement, but the team who organized and the presenters were really good. Of course I gave a presentation about the popular topic: syslog-ng, pattern-db, classification and message parsing. You can download my presentation here.

Nowadays

Friday, September 17, 2010 @ 12:09 PM Author: Höltzl Péter
happened a lot
  • 75 studnets attending the ESEC course @BMF
  • I was nominated to the price: ITBusiness Útmutató szakember (
  • I am giving lectures all the time
  • I have refreshed the SCB, SSB and syslog-ng training materials (new releases have come)
  • I am presenting on the Hacktivity this sunday.
  • I am preparing my presentation at ...

Non-integrated system…

Friday, August 6, 2010 @ 12:08 PM Author: Höltzl Péter
Two interesting affair happened to me, which is a good example, that IT systems are not connected together in providers internal system: 1st affair: my bank placed a serious debit hold on my account, because one of the requirement was not realized (second child, which is a Hungarian governmental bank-loan support). They forgot to notice me, ...

Trainings in Q3/Q4

Friday, August 6, 2010 @ 10:08 AM Author: Höltzl Péter
We have released training dates in the Q3/Q4: September:
  • SPE-SSB-EN (3 nap) szeptember 14-15-16 (37. hét)
November:
  • SCB-EN (2 nap) november 9-10 (45. hét)
You can apply for the trainings here. See you soon in Münich!

Prioritize messages in network traffic

Friday, August 6, 2010 @ 10:08 AM Author: Höltzl Péter
Sometimes our systems generate large amount of messages, which might flood our network. How can we prevent it, while we make sure that important messages will arrive for sure? Somehow we must prioritize messages by message class or other attribute? Of course our solution works on the client or (mainly) on relays. Fortunately we have ...

Featuring WPMU Bloglist Widget by YD WordPress Developer