First, I apologize to the list for letting this 1MB email to pass.
Second, as you see in the strace output this process didn't do anything.
So, one or two things, you have 2 syslog daemons, or process running on port 514, or you have firewall on the box discarding this traffic.
Javier
nbkr wrote:
Hi,
Javier here is the tcpdump output .
[EMAIL PROTECTED] balu]# tcpdump -n port 514 tcpdump: listening on eth1 16:02:16.827385 172.25.11.2.49465 > 172.25.12.103.syslog: udp 140 16:02:24.271444 172.25.11.42.49165 > 172.25.12.103.syslog: udp 124 16:02:25.276513 172.25.11.42.49165 > 172.25.12.103.syslog: udp 102 16:02:25.347298 172.25.11.2.49465 > 172.25.12.103.syslog: udp 142 16:02:28.736759 172.25.11.42.49165 > 172.25.12.103.syslog: udp 100 16:02:28.737669 172.25.11.42.49165 > 172.25.12.103.syslog: udp 122 16:02:29.125600 172.25.11.2.49465 > 172.25.12.103.syslog: udp 140 16:02:29.126182 172.25.11.2.49465 > 172.25.12.103.syslog: udp 140 16:02:34.377192 172.25.7.100.55803 > 172.25.12.103.syslog: udp 121 16:02:56.086701 172.25.11.2.49465 > 172.25.12.103.syslog: udp 140 16:02:56.087343 172.25.11.2.49465 > 172.25.12.103.syslog: udp 138 16:03:05.492509 172.25.11.2.49465 > 172.25 .! 12.103.syslog: udp 142 16:03:10.505434 172.25.11.2.49465 > 172.25.12.103.syslog: udp 142 16:03:12.757967 172.25.11.2.49465 > 172.25.12.103.syslog: udp 142 16:03:12.758603 172.25.11.2.49465 > 172.25.12.103.syslog: udp 139 16:03:24.712168 172.25.11.2.49465 > 172.25.12.103.syslog: udp 142 16:03:26.352465 172.25.11.2.49465 > 172.25.12.103.syslog: udp 139
[EMAIL PROTECTED] balu]# netstat -putan | grep syslogd
udp 0 0 0.0.0.0:514 0.0.0.0:* 11955/syslogd
And also I am attaching the output of strace command
And one more thing In this machine there are two ethernet ports eth0 & eth1 i have disabled eth0 and am using eth1.
Regards,
nbkr
-- =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= Javier Szyszlican, Project Leader, JFFNMS [EMAIL PROTECTED]
I hope JFFNMS or I were helpful to you, if you can, please donate at http://jffnms.org/donate
------------------------------------------------------- This SF.net email is sponsored by: IT Product Guide on ITManagersJournal Use IT products in your business? Tell us what you think of them. Give us Your Opinions, Get Free ThinkGeek Gift Certificates! Click to find out more http://productguide.itmanagersjournal.com/guidepromo.tmpl _______________________________________________ jffnms-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/jffnms-users
