syslog from Cisco - FreeBSD not working
Hi, I'm running into a problem configuring my syslogd in order to accept messages from Routers (Cisco). Here's what I did in my syslog.conf: local7.*/var/log/cisco-syslog Fields are separated by tabs of course In /etc/rc.conf I've got the following: syslogd_flags=-a 192.168.0.0/16 matching my local network. Unfortunately I don't see anything in my syslog from the router(s). I fired up tcpdump and sure enough the syslog-packets originating from the router hit my machine. To further track this down I changed the above line in syslog.conf to read +myrouter local7.*/var/log/cisco-syslog +* Again, no syslog messages. Next try: /etc/syslog.conf: local7.*/var/log/debug.log Again, no entry in the log Sure enough I restared syslogd between every test; also I have the fields in syslog.conf separted by tabs and the log-files in questions are existent with and chmod-ed 600. Any ideas what could be wrong here - or put in another way - has anybody out there got logging from Ciscos towards a FreeBSD box running? TIA for your help! -ewald ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: [freebsd-questions] syslog from Cisco - FreeBSD not working
Ewald Jenisch wrote: To further track this down I changed the above line in syslog.conf to read +myrouter local7.*/var/log/cisco-syslog +* What I did to get this working was (in syslog.conf): +printserver !* *.* /usr/log/printserver.log AND in /etc/hosts: 10.1.1.8printserver so that the 'printserver' name is resolved. No doubt a reverse DNS entry would have done the job too. My syslogd command line is like yours. Hope that might help... Howie ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
syslog behaving differently with -d (was: syslog from Cisco - FreeBSD not working)
On Tue, Feb 06, 2007 at 12:00:09PM +0100, Ewald Jenisch wrote: Hi, I'm running into a problem configuring my syslogd in order to accept messages from Routers (Cisco). Here's what I did in my syslog.conf: local7.*/var/log/cisco-syslog Hi, A couple of hours after my original question I found out an interesting point: When running syslogd with the -d (debug-flag) messages get written into the file configured in /etc/syslog.conf - when running without the debug-flag nothing gets written. To be specific: With the above syslog.conf entry and /etc/rc.conf containting 'syslogd_flags=-d' I get the following output on the console: cvthname(192.168.9.95) logmsg: pri 275, flags 0, from switch1-1, msg 1390: Feb 6 13:59:40 MET: %SYS-5-CONFIG_I: Configured from console by ej1 on vty0 (192.168.9.16) Logging to FILE /var/log/cisco-syslog Sure enough this log message is in the cisco-syslog file. As soon as I turn off debug in syslog (i.e. running without the -d flag) nothing gets written to the cisco-syslog file. Why are messages only written to the file when running syslogd in debug mode?? TIA for any clue, -ewald ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: [freebsd-questions] syslog from Cisco - FreeBSD not working
Howard Jones wrote: Ewald Jenisch wrote: To further track this down I changed the above line in syslog.conf to read +myrouter local7.*/var/log/cisco-syslog +* What I did to get this working was (in syslog.conf): +printserver !* *.* /usr/log/printserver.log AND in /etc/hosts: 10.1.1.8printserver so that the 'printserver' name is resolved. No doubt a reverse DNS entry would have done the job too. My syslogd command line is like yours. Also, the -a flag may be used with syslogd. Hope that might help... Howie ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED] Regards, -- .O. | Daniel Molina Wegener | C/C++ Developer ..O | dmw [at] unete [dot] cl | FOSS Coding Addict OOO | FreeBSD Linux User| Standards Rocks! ___ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
