From owner-freebsd-questions Tue Jul 3 11: 9:20 2001 Delivered-To: freebsd-questions@freebsd.org Received: from shumai.marcuscom.com (rdu26-228-058.nc.rr.com [66.26.228.58]) by hub.freebsd.org (Postfix) with ESMTP id C9DCC37B401 for ; Tue, 3 Jul 2001 11:09:13 -0700 (PDT) (envelope-from marcus@marcuscom.com) Received: from localhost (marcus@localhost) by shumai.marcuscom.com (8.11.3/8.11.3) with ESMTP id f63I9rp88533; Tue, 3 Jul 2001 14:09:53 -0400 (EDT) (envelope-from marcus@marcuscom.com) X-Authentication-Warning: shumai.marcuscom.com: marcus owned process doing -bs Date: Tue, 3 Jul 2001 14:09:53 -0400 (EDT) From: Joe Clarke To: Cc: Subject: Re: Using syslogd In-Reply-To: <20010703135844.N2342-100000@bsd.smnolde.com> Message-ID: <20010703140850.Y27505-100000@shumai.marcuscom.com> MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.ORG Make sure /etc/syslog.conf does not contain any spaces. Everything should be TAB separated. If you use spaces, things will fail silently. You'll also want to confirm that 514/udp is being opened using netstat or sockstat. Looks like that should be okay, though. Joe Clarke On Tue, 3 Jul 2001 scott.nolde@mediaone.net wrote: > I'm having a helluva time getting syslogd to log the syslog packets from a > cisco router. Here's my setup: > > in /etc/rc.conf: > syslogd_enable="YES" > syslogd_flags="-a 192.168.1.249" > > in /etc/syslogd.conf: > *.* /var/log/messages > > I'm receiving packets at the network interface and have made an ipfw rule > to allow them specifically (even on an OPEN firewall): > 63000 188 18944 allow udp from 192.168.1.249 to any 514 > > My loghost has ip address of 192.168.1.200, so the above *should* work > according to the man pages. > > I've even verified the ability to log to a linux laptop, but not to my > FreeBSD4.3-STABLE box. > > Can anyone provide a clue as to why it's not logging? > > Thanks, > Scott > > > To Unsubscribe: send mail to majordomo@FreeBSD.org > with "unsubscribe freebsd-questions" in the body of the message > > To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message