Guides
How to get logs, flows, traps and Windows events from real equipment onto a MobiObs device, by task, by vendor and by problem. Every example uses the MobiObs default ports, which are above 1024 because Android does not let apps listen on lower ports. MobiObs uses the same ports on every platform.
| Data | Send to | Instead of |
|---|---|---|
| Syslog (RFC 3164/5424, CEF, LEEF, NXLog JSON) | udp/5514 or tcp/5514 | 514 |
| NetFlow v5/v9 and IPFIX | udp/2055 | unchanged |
| sFlow v5 | udp/6343 | unchanged |
| SNMP traps and informs | udp/1162 | 162 |
By task
Portable syslog server
Receive and search syslog from switches, firewalls and servers on a mobile device, over UDP or TCP.
NetFlow, IPFIX and sFlow collector
See top talkers, ports and protocols from flow exports, with templates and sampling handled.
SNMP trap receiver
Catch linkDown, authentication and vendor traps in v1, v2c and v3, including informs.
Windows Event forwarding with NXLog
Send Security, System and Application events from Windows hosts as structured JSON over syslog.
On-site network troubleshooting
A playbook for the network you are standing in, from a home lab or branch office to a datacenter or an event: wireless controllers, switches, firewalls and slow-network faults.
By vendor
Cisco
IOS and IOS XE syslog, Flexible NetFlow and SNMP traps, with NX-OS notes.
Juniper
Junos syslog with structured data, sFlow, inline IPFIX on MX, and SNMP v2c and v3 traps.
Aruba
AOS-CX syslog, sFlow and SNMP traps, plus ArubaOS 8 controllers and relays for fixed ports.
Fortinet
FortiGate syslog in RFC 5424 or CEF, NetFlow, sFlow and SNMP.
MikroTik
RouterOS remote logging, Traffic Flow (NetFlow/IPFIX) and SNMP traps.
Linux and rsyslog
rsyslog and syslog-ng forwarding, software flow exporters and net-snmp tests.
Cisco Meraki
Dashboard syslog servers and roles, and NetFlow from the MX.
Palo Alto Networks
PAN-OS syslog server and log forwarding profiles, NetFlow, and traps through a relay.
Ubiquiti
UniFi activity logs in CEF and gateway NetFlow, plus EdgeRouter syslog through a relay.
pfSense and OPNsense
Remote syslog, softflowd and OPNsense NetFlow, and pfSense SNMP traps.
VMware ESXi
esxcli log host and firewall, SNMP trap targets, and vCenter log forwarding.
Synology DSM
Log Center Log Sending over UDP or TCP, in BSD or IETF format.
Problems and how-tos
Why an Android device can’t receive syslog on port 514
Privileged ports, which ports to use instead, and relays for senders that cannot change the port.
Capture SNMP traps during a network cutover
A runbook: receiver on udp/1162, a test trap first, and what to watch while you work.
Top talkers on a branch uplink without a collector VM
Export flows from the branch router and find out who is filling the link.
Syslog for home labs without an observability stack
Logs, flows and traps from a home lab on a mobile device, tablet or laptop.
Not covered here? The support page lists the generic settings to look for, and support@mobiobs.com takes requests for new guides.