From owner-freebsd-questions@FreeBSD.ORG  Sat Nov  1 10:06:25 2003
Return-Path: <owner-freebsd-questions@FreeBSD.ORG>
Delivered-To: freebsd-questions@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id ED04C16A4CE
	for <questions@freebsd.org>; Sat,  1 Nov 2003 10:06:25 -0800 (PST)
Received: from jodocus.org (f8103.upc-f.chello.nl [80.56.8.103])
	by mx1.FreeBSD.org (Postfix) with ESMTP id BFE3143F75
	for <questions@freebsd.org>; Sat,  1 Nov 2003 10:06:24 -0800 (PST)
	(envelope-from joost@jodocus.org)
Received: from jodocus.org (localhost [127.0.0.1])
	by jodocus.org (8.12.8p1/8.12.8) with ESMTP id hA1I6KeE009753
	(version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO);
	Sat, 1 Nov 2003 19:06:20 +0100 (CET)
	(envelope-from joost@jodocus.org)
Received: (from joost@localhost)
	by jodocus.org (8.12.8p1/8.12.8/Submit) id hA1I6Jha009752;
	Sat, 1 Nov 2003 19:06:19 +0100 (CET)
Date: Sat, 1 Nov 2003 19:06:19 +0100
From: Joost Bekkers <joost@jodocus.org>
To: list <list@siddiquifamily.org>
Message-ID: <20031101180619.GA9691@bps.jodocus.org>
References: <200311011133.39486.list@siddiquifamily.org>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <200311011133.39486.list@siddiquifamily.org>
User-Agent: Mutt/1.4i
cc: questions@freebsd.org
Subject: Re: Syslog and Cisco
X-BeenThere: freebsd-questions@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: User questions <freebsd-questions.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>,
	<mailto:freebsd-questions-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-questions>
List-Post: <mailto:freebsd-questions@freebsd.org>
List-Help: <mailto:freebsd-questions-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>,
	<mailto:freebsd-questions-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Sat, 01 Nov 2003 18:06:26 -0000

On Sat, Nov 01, 2003 at 11:33:39AM -0600, list wrote:
> I am trying to send cisco's syslog to Syslogd and i have been unsuccessful. I 
> have modified the syslog.conf to list local6.*	/var/log/cisco. I have changed 
> rc.conf to start syslog with -a and removed the -s command. I have checked 
> with logger. While using the logger from FreeBsd i am able to log meesage in 
> to the cisco.log file. However from network i am not able to do so. I looked 
> tcpdump see the packets but nothing shows in cisco.log or to all the other 
> log files.
> 

You have to specify a 'service' of * on the syslogd commandline (with
the -a option). By default syslogd only accepts packets coming from
the sysog port on the remote host.  Cisco uses a dynamicly allocated
port for sending the logging.

Hope this helps.

-- 
greetz Joost
joost@jodocus.org