From owner-freebsd-questions@FreeBSD.ORG Sat Apr 14 05:44:18 2007 Return-Path: X-Original-To: freebsd-questions@freebsd.org Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [69.147.83.52]) by hub.freebsd.org (Postfix) with ESMTP id 83A6216A403 for ; Sat, 14 Apr 2007 05:44:18 +0000 (UTC) (envelope-from web@3dresearch.com) Received: from smtp.3dresearch.com (dorabella.3dresearch.com [66.167.251.2]) by mx1.freebsd.org (Postfix) with ESMTP id 5AB4413C457 for ; Sat, 14 Apr 2007 05:44:18 +0000 (UTC) (envelope-from web@3dresearch.com) Received: from doncurzio.3dresearch.com (27.mars6.xdsl.nauticom.net [209.195.153.252]) by vmail.3dresearch.com (Postfix) with ESMTP id 4C2BE856A6; Sat, 14 Apr 2007 01:44:17 -0400 (EDT) Message-Id: <6.2.1.2.0.20070414011215.03712008@imap.telissant.com> X-Mailer: QUALCOMM Windows Eudora Version 6.2.1.2 Date: Sat, 14 Apr 2007 01:34:22 -0400 To: des@des.no (Dag-Erling =?iso-8859-1?Q?Sm=F8rgrav?= ) From: web@3dresearch.com In-Reply-To: <861wingb9a.fsf@dwp.des.no> References: <86irc0kqhb.fsf@dwp.des.no> <6.2.1.2.0.20070413170506.04088680@imap.telissant.com> <861wingb9a.fsf@dwp.des.no> Mime-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1"; format=flowed Content-Transfer-Encoding: quoted-printable Cc: freebsd-questions@freebsd.org Subject: Re: Syslog not logging remote host X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 14 Apr 2007 05:44:18 -0000 At 06:28 PM 4/13/2007, you wrote: >web@3dresearch.com writes: > > Dag-Erling Sm=F8rgrav writes: > > > If 10.61.70.100 runs FreeBSD, syslogd_flags defaults to -s, which > > > disables the listening socket. > > Yes, 10.61.70.100 is running 5.5-STABLE, and I have in /etc/rc.conf= there: > > > > syslogd_flags=3D"-a 10.61.70.1/32" > >Check with tcpdump? > >DES >-- >Dag-Erling Sm=F8rgrav - des@des.no This is what I got on 10.61.70.100 (gww.floco.com is 10.61.70.1): # tcpdump -r capture1 reading from file capture1, link-type EN10MB (Ethernet) 00:58:07.203800 IP gww.floco.com.syslog > 10.61.70.100.syslog: UDP, length:= 126 00:58:33.295297 IP gww.floco.com.syslog > 10.61.70.100.syslog: UDP, length:= 44 00:58:33.340779 IP gww.floco.com.syslog > 10.61.70.100.syslog: UDP, length:= 49 00:59:21.436782 IP gww.floco.com.syslog > 10.61.70.100.syslog: UDP, length:= 55 00:59:21.438125 IP gww.floco.com.syslog > 10.61.70.100.syslog: UDP, length:= 71 00:59:21.439305 IP gww.floco.com.syslog > 10.61.70.100.syslog: UDP, length:= 99 00:59:21.440458 IP gww.floco.com.syslog > 10.61.70.100.syslog: UDP, length:= 92 ...and more of the same. -- Janos Dohanics