test-pan

#!/bin/bash

# Palo Alto TRAFFIC

# <190>Jan 28 01:28:35 panw-host 1,2014/01/28 01:28:35,007200001056,TRAFFIC,end,1,2014/01/28 01:28:34,192.168.41.30,192.168.41.255,10.193.16.193,192.168.41.255,allow-all,,,netbios-ns,vsys1,Trust,Untrust,ethernet1/1,ethernet1/2,To-Panorama,2014/01/28 01:28:34,8720,1,137,137,11637,137,0x400000,udp,allow,276,276,0,3,2014/01/28 01:28:02,2,any,0,2076326,0x0,192.168.0.0-192.168.255.255,192.168.0.0-192.168.255.255,0,3,0

echo
echo Sending Palo Alto TRAFFIC event:
echo
echo -e "<190>`date +\"%b %d %H:%M:%S\"` panw-traffic-host 1,`date +\"%Y/%m/%d %H:%M:%S\"`,007200001056,TRAFFIC,end,1,`date +\"%Y/%m/%d %H:%M:%S\"`,192.168.41.30,192.168.41.255,10.193.16.193,192.168.4 1.255,allow-all,,,netbios-ns,vsys1,Trust,Untrust,ethernet1/1,ethernet1/2,To-Panorama,2014/01/28 01:2 8:34,8720,1,137,137,11637,137,0x400000,udp,allow,276,276,0,3,2014/01/28 01:28:02,2,any,0,2076326,0x0 ,192.168.0.0-192.168.255.255,192.168.0.0-192.168.255.255,0,3,0"

echo -e "<190>`date +\"%b %d %H:%M:%S\"` panw-traffic-host 1,`date +\"%Y/%m/%d %H:%M:%S\"`,007200001056,TRAFFIC,end,1,`date +\"%Y/%m/%d %H:%M:%S\"`,192.168.41.30,192.168.41.255,10.193.16.193,192.168.4 1.255,allow-all,,,netbios-ns,vsys1,Trust,Untrust,ethernet1/1,ethernet1/2,To-Panorama,2014/01/28 01:2 8:34,8720,1,137,137,11637,137,0x400000,udp,allow,276,276,0,3,2014/01/28 01:28:02,2,any,0,2076326,0x0 ,192.168.0.0-192.168.255.255,192.168.0.0-192.168.255.255,0,3,0" | nc -w 1 sc4s.smg.aws 514

sleep 1

# Palo Alto THREAT

# <190>Oct 30 09:46:17 1,2012/10/30 09:46:17,01606001116,THREAT,url,1,2012/04/10 04:39:55,192.168.0.2,204.232.231.46,0.0.0.0,0.0.0.0,rule1,crusher,,web-browsing,vsys1,trust,untrust,ethernet1/2,ethernet1/1,forwardAll,2012/04/10 04:39:57,22860,1,59303,80,0,0,0x208000,tcp,alert,"litetopdetect.cn/index.php",(9999),not-resolved,informational,client-to-server,0,0x0,192.168.0.0-192.168.255.255,United States,0,text/html

echo
echo Sending Palo Alto THREAT event:
echo
echo -e "<190>`date +\"%b %d %H:%M:%S\"` panw-threat-host 1,`date +\"%Y/%m/%d %H:%M:%S\"`,01606001116,THREAT,url,1,`date +\"%Y/%m/%d %H:%M:%S\"`,192.168.0.2,204.232.231.46,0.0.0.0,0.0.0.0,rule1,crusher,,web-browsing,vsys1,trust,untrust,ethernet1/2,ethernet1/1,forwardAll,2012/04/10 04:39:57,22860,1,59303,80,0,0,0x208000,tcp,alert,"litetopdetect.cn/index.php",(9999),not-resolved,informational,client-to-server,0,0x0,192.168.0.0-192.168.255.255,United States,0,text/html"

echo -e "<190>`date +\"%b %d %H:%M:%S\"` panw-threat-host 1,`date +\"%Y/%m/%d %H:%M:%S\"`,01606001116,THREAT,url,1,`date +\"%Y/%m/%d %H:%M:%S\"`,192.168.0.2,204.232.231.46,0.0.0.0,0.0.0.0,rule1,crusher,,web-browsing,vsys1,trust,untrust,ethernet1/2,ethernet1/1,forwardAll,2012/04/10 04:39:57,22860,1,59303,80,0,0,0x208000,tcp,alert,"litetopdetect.cn/index.php",(9999),not-resolved,informational,client-to-server,0,0x0,192.168.0.0-192.168.255.255,United States,0,text/html" | nc -w 1 sc4s.smg.aws 514