Date: Sun, 6 Jan 2002 18:47:17 -0800 From: "Crist J. Clark" <cristjc@earthlink.net> To: Patrick Gelsema <gelsema@superhero.nl> Cc: freebsd-questions@FreeBSD.ORG Subject: Re: Logging from a remote system Message-ID: <20020106184717.B2029@gohan.cjclark.org> In-Reply-To: <a1ajj9$oqt$1@news1.xs4all.nl>; from gelsema@superhero.nl on Sun, Jan 06, 2002 at 11:37:28PM %2B0100 References: <a1ajj9$oqt$1@news1.xs4all.nl>
next in thread | previous in thread | raw e-mail | index | archive | help
On Sun, Jan 06, 2002 at 11:37:28PM +0100, Patrick Gelsema wrote:
[snip]
> On 192.168.163.25 box i changed the syslog.conf and added the following
> lines at the end of the file
>
> +router.superhero.nl
> *.* /var/log/router
> +192.168.254.100
> *.* /var/log/router
At the end? Make sure there are no "program" blocks (lines beginning
with '!' or '#!') in front of these. From syslog.conf(5),
Each block of lines is separated from the previous block by a program or
hostname specification. A block will only log messages corresponding to
the most recent program and hostname specifications given. Thus, a block
which selects `ppp' as the program, directly followed by a block that
selects messages from the hostname `dialhost', then the second block will
only log messages from the ppp(8) program on dialhost.
If this is not the problem, run syslogd(8) with the '-d' option to see
if you can see what is going on. If that doesn't help, make sure the
syslog traffic is even there and run,
# tcpdump -n 'udp && port 514'
On the syslog server.
--
"It's always funny until someone gets hurt. Then it's hilarious."
Crist J. Clark | cjclark@alum.mit.edu
| cjclark@jhu.edu
http://people.freebsd.org/~cjc/ | cjc@freebsd.org
To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20020106184717.B2029>