User guide

16
[log-directory] -> [./]
[interface] -> [eth0]
[syslog-only] -> [no]
[include-networks]
[filter] -> [192.168.20.5/32]
[filter] -> [127.0.0.1]
[filter] -> [172.0.0.0/8]
[exclude-networks]
[heartbeat-frequency] -> [300]
[statistics-frequency] -> [60]
[compress-events] -> [1]
[filter-expression] -> [udp or tcp or icmp]
This is what the XML policy file contains:
<?xml version="1.0" encoding="UTF-8" standalone="no"?> <options
xmlns:xi="http://www.w3.org/2003/XInclude">
<log-directory>./</log-directory>
<interface>eth0</interface>
<syslog-only>no</syslog-only>
<include-networks>
<filter>192.168.20.5/32</filter>
<filter>127.0.0.1</filter>
<filter>172.0.0.0/8</filter>
</include-networks>
<exclude-networks/>
<heartbeat-frequency>300</heartbeat-frequency>
<statistics-frequency>60</statistics-frequency>
<compress-events>1</compress-events>
<filter-expression>udp or tcp or icmp</filter-expression> </options>
LCE Conf Converter
The LCE Conf Converter is a utility to convert LCE configuration files from versions of the LCE Clients prior to 4.0 to new
policy files.
The following command run from the command line with no options will display the help file:
# /opt/lce/daemons/lce_conf_file_converter
There are four valid options to use as described in the table below:
Option
Description
--input-conf-file
-i
The input configuration file (i.e., lce_client.conf)
--output-policy-file
-o
The output policy file (e.g., my-new-policy.lcp)
--help
-h
Display the help menu
--version
-v
Display version information