Thanks John. Your suggestion did the trick.
Much appreciated. Cheers. Andy -----Original Message----- From: John Kougoulos [mailto:k...@intracom.gr] Sent: Monday, 21 September 2009 6:03 PM To: Andy Saykao Cc: cisco-nsp@puck.nether.net Subject: Re: [c-nsp] Router logs going to dmesg Hello, somewhere at the start of syslog.conf you will see something like: *.err /dev/sysmsg *err;kern.debug /var/adm/messages *.alert;kern.err operator etc. change it to something like: *.err;local0.none /dev/sysmsg *err;kern.debug;local0.none /var/adm/messages etc. and then pkill -1 syslogd Regards, John On Mon, 21 Sep 2009, Andy Saykao wrote: > Hi All, > > I'm trying to send cisco logs to a syslog server running Solaris 9. > It's logging fine except that I'm seeing some logs showing up in dmesg. > > Example of a dmesg outout: > > Sep 21 13:44:16 [172.16.9.18.224.173] 3297: Sep 21 13:44:15.981 AEST: > %LINK-3-UPDOWN: Interface GigabitEthernet0/45, changed state to down > Sep 21 13:44:21 [172.16.9.18.224.173] 3298: Sep 21 13:44:20.956 AEST: > %LINK-3-UPDOWN: Interface GigabitEthernet0/45, changed state to up Sep > 21 13:48:38 agr1-cr-loopback-0.x.x.x 315047: Sep 21 13:48:37.756 > AEST: %SNMP-3-AUTHFAIL: Authentication failure for SNMP req from host > 83.143.128.1 > > I've tried changing the facility to local0.info on the cisco devices > but still the same thing is happening. Is there a particular facility > I should be using so the logs don't appear in dmesg??? > > This was the only thing I could find on goggle about my problem but no > real solution. > > http://www.velocityreviews.com/forums/t34315-which-facility-is-best-fo > r- > logging-to-linux-syslog.html > > > This is my /etc/syslog.conf file. > > # Log cisco routers > local0.info /var/log/cisco.log > > > And my config on the routers. > > logging facility local0 > logging source-interface Loopback0 > logging 210.15.210.x > > Thanks. > > Andy > > This email and any files transmitted with it are confidential and > intended solely for the use of the individual or entity to whom they are addressed. > Please notify the sender immediately by email if you have received > this email by mistake and delete this email from your system. Please > note that any views or opinions presented in this email are solely > those of the author and do not necessarily represent those of the organisation. > Finally, the recipient should check this email and any attachments for > the presence of viruses. The organisation accepts no liability for any > damage caused by any virus transmitted by this email. > > _______________________________________________ > cisco-nsp mailing list cisco-nsp@puck.nether.net > https://puck.nether.net/mailman/listinfo/cisco-nsp > archive at http://puck.nether.net/pipermail/cisco-nsp/ > ______________________________________________________________________ This email has been scanned by the MessageLabs Email Security System. For more information please visit http://www.messagelabs.com/email ______________________________________________________________________ _______________________________________________ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/