From owner-freebsd-questions@FreeBSD.ORG Thu May 22 11:09:32 2003 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id DC85437B404 for ; Thu, 22 May 2003 11:09:32 -0700 (PDT) Received: from asarian-host.net (mail.asarian-host.net [194.109.160.70]) by mx1.FreeBSD.org (Postfix) with ESMTP id 2FD8843FA3 for ; Thu, 22 May 2003 11:09:31 -0700 (PDT) (envelope-from admin@asarian-host.net) Comments: To protect the identity of the sender, certain header fields are either not shown, or masked. Anonymous email accounts can be requested by filling in the appropriate form at: https://asarian-host.net/cgi-bin/signup.cgi Received: (from root@localhost) by mail.asarian-host.net (8.12.9/8.12.9) id h4MI9TRG028117 for freebsd-questions@freebsd.org; Thu, 22 May 2003 20:09:29 +0200 (CEST) (envelope-from admin@asarian-host.net) From: Mark Message-Id: <200305221809.H4MI9SGZ028102@asarian-host.net> Date: Thu, 22 May 2003 18:09:29 GMT X-Authenticated-Sender: admin@asarian-host.net X-Trace: cDfLTCvu8c5OMPwItnUGO9XM5E3CyqqinbgKPD6W3H2iRuWdVvUR2a+bir6W5QYTE/5OV409QvfsJSnmZBgN2w== X-Complaints-To: abuse@asarian-host.net X-Abuse-Info: Please be sure to forward a copy of ALL headers X-Abuse-Info: Otherwise we are unable to process your complaint Organization: Asarian-host To: "Andy Farkas" References: <20030522082218.A93323-100000@hewey.af.speednet.com.au> MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: 7bit X-Priority: 3 X-MSMail-Priority: Normal X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1165 X-Auth: Asarian-host PGP signature iQEVAwUAPs0SWTFqW1BleBN9AQG8pQf/eF24zww0GOodclyLSGIKnp0SaZD8AWqy pkB9stEtzbamvDWKpb5iTWuOUUETJVpUiULzc9zqfu8rn2iPIvmqUWaQxCAlhNVF +UBmmNCbwrDQpNDTigmeZQSFoVtVJvgHukYlGbFOf9WolgpIWteYUgeY6oePqUsA +L4v/WlA5UBc6s+GL5Qh8spPhlb06nJW7trKt/wJTq+cxuV6ctotsT6iQwEEqv/6 O3gob+PPc4pZuzGQxND/xNubPDI93PR5xoEs8XOOBhp6r6HkfJOQGfuvjz7DTHNS +UmsLAnXy7OEbO2GMtRKF9pp05oIcmNhQcQaJI+CbZqLjcMF7AAjkw== =bJti cc: freebsd-questions@freebsd.org Subject: Re: Syslog from external machine X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 22 May 2003 18:09:33 -0000 ----- Original Message ----- From: "Andy Farkas" To: "Mark" Cc: Sent: Thursday, May 22, 2003 12:41 AM Subject: Re: Syslog from external machine > On Wed, 21 May 2003, Mark wrote: > > > Using FreeBSD 4.7R, I was experimenting a bit with my router's > > syslog facility (on port 514). I set up syslogd like this: > > > > /usr/sbin/syslogd -a 192.168.1.1:514 > > > > Assuming this would allow incoming UDP on port 514 for the > > 192.168.1.1 router address. Alas, nothing is logged in > > /var/log/messages. > > Go into /etc/syslog.conf and uncomment the `*.* /var/log/all.log > line. touch /var/log/all.log and restart syslogd. > > Now you can monitor all messages sent to syslogd. Indeed, this now works. :) But I get a LOT of messages in /var/log/all.log! Is there not a way I can log 'the rest'? See, now I have something like: ... mail.info /var/log/maillog lpr.info /var/log/lpd-errs cron.* /var/log/cron *.err root *.notice;news.err root *.alert root *.emerg * *.* /var/log/router.log But what I would really want is: "Everything which is not covered by any of the above, log to /var/log/router.log". Something like: "!*.*". Well, you know what I mean. If that is not possible, is there a way I can determine to what syslog facility the router is logging? (like "mail.crit" or something). Much obliged, - Mark