Guides
How to get logs, flows, traps and Windows events from real equipment onto a MobiObs device, by task and by vendor. Every example uses the MobiObs default ports, which are above 1024 because mobile operating systems do not let apps listen on lower ports.
| Data | Send to | Instead of |
|---|---|---|
| Syslog (RFC 3164/5424, CEF, LEEF, NXLog JSON) | udp/5514 or tcp/5514 | 514 |
| NetFlow v5/v9 and IPFIX | udp/2055 | unchanged |
| sFlow v5 | udp/6343 | unchanged |
| SNMP traps and informs | udp/1162 | 162 |
By task
Portable syslog server
Receive and search syslog from switches, firewalls and servers on a mobile device, over UDP or TCP.
NetFlow, IPFIX and sFlow collector
See top talkers, ports and protocols from flow exports, with templates and sampling handled.
SNMP trap receiver
Catch linkDown, authentication and vendor traps in v1, v2c and v3, including informs.
Windows Event forwarding with NXLog
Send Security, System and Application events from Windows hosts as structured JSON over syslog.
Venue network troubleshooting
A playbook for stadiums, arenas and convention centres: scanners, wireless controllers and event-day faults.
By vendor
Cisco
IOS and IOS XE syslog, Flexible NetFlow and SNMP traps, with NX-OS notes.
Juniper
Junos syslog with structured data, sFlow, inline IPFIX on MX, and SNMP v2c and v3 traps.
Aruba
AOS-CX syslog, sFlow and SNMP traps, plus ArubaOS 8 controllers and relays for fixed ports.
Fortinet
FortiGate syslog in RFC 5424 or CEF, NetFlow, sFlow and SNMP.
MikroTik
RouterOS remote logging, Traffic Flow (NetFlow/IPFIX) and SNMP traps.
Linux and rsyslog
rsyslog and syslog-ng forwarding, software flow exporters and net-snmp tests.
Not covered here? The support page lists the generic settings to look for, and support@mobiobs.com takes requests for new guides.