From owner-freebsd-questions  Thu Apr 25 18:24: 7 2002
Delivered-To: freebsd-questions@freebsd.org
Received: from ebert.xypoint.com (ebert.xypoint.com [216.190.251.65])
	by hub.freebsd.org (Postfix) with ESMTP id 19BBF37B416
	for <freebsd-questions@freebsd.org>; Thu, 25 Apr 2002 18:24:03 -0700 (PDT)
Received: by ebert.xypoint.com with Internet Mail Service (5.5.2655.55)
	id <JLZZ0HA6>; Thu, 25 Apr 2002 18:23:52 -0700
Message-ID: <38985D9205A0D411A10500508B10DE660299767C@ebert.xypoint.com>
From: Ryan Hill <rhill@xypoint.com>
To: "'freebsd-questions@freebsd.org'" <freebsd-questions@freebsd.org>
Subject: RE: remote syslog setup help on 4.5 STABLE
Date: Thu, 25 Apr 2002 18:23:52 -0700
MIME-Version: 1.0
X-Mailer: Internet Mail Service (5.5.2655.55)
Content-Type: text/plain
Sender: owner-freebsd-questions@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-questions.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-questions>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-questions>
X-Loop: FreeBSD.ORG

ok, I promise not to answer my own questions anymore.

I needed to move my syslog.conf entries above the ppp and slip lines, for
some reason, the formatting was causing syslog to evaluate the facility
settings incorrectly.

regards,
ryan

> -----Original Message-----
> From: Ryan Hill 
> Sent: Thursday, April 25, 2002 6:12 PM
> To: 'freebsd-questions@freebsd.org'
> Subject: remote syslog setup help on 4.5 STABLE
> 
> 
> hey all,
> 
> I thought this would be easy!  I've got syslog running 
> without the -s flag, and if I'm understanding the man page 
> for syslogd correctly, that should allow me to receive remote 
> syslog broadcasts, yes?
> 
> I've verified that the packets are making it to my syslog, 
> but then going nowhere, where is the magic switch I've 
> forgotten to turn on?
> 
> syslog -d output:
> Logging to CONSOLE /dev/console
> Logging to USERS
> Logging to USERS
> logmsg: pri 166, flags 17, from battleship, msg Apr 25 
> 18:06:54 sinker %PIX-3-106011: Deny inbound (No xlate) icmp 
> src outside:123.456.789.123 dst outside:123.456.789.123 (type 
> 8, code 0) 
> 
> syslog.conf relevant line:
> local5.*				/var/log/remote/pix/office_inet
> 
> thanks,
> ryan
> 

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message