Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 6 Feb 2007 12:00:09 +0100
From:      Ewald Jenisch <a@jenisch.at>
To:        freebsd-questions@freebsd.org
Subject:   syslog from Cisco -> FreeBSD not working
Message-ID:  <20070206110009.GA93053@aurora.oekb.co.at>

next in thread | raw e-mail | index | archive | help
Hi,

I'm running into a problem configuring my syslogd in order to accept
messages from Routers (Cisco).


Here's what I did in my syslog.conf:
local7.*                /var/log/cisco-syslog

Fields are separated by tabs of course

In /etc/rc.conf I've got the following:
syslogd_flags="-a 192.168.0.0/16"
matching my local network.

Unfortunately I don't see anything in my syslog from the router(s). I
fired up tcpdump and sure enough the syslog-packets originating from
the router hit my machine.

To further track this down I changed the above line in syslog.conf to
read

+myrouter
local7.*                /var/log/cisco-syslog
+*

Again, no syslog messages.

Next try:
/etc/syslog.conf:
local7.*                /var/log/debug.log

Again, no entry in the log


Sure enough I restared syslogd between every test; also I have the
fields in syslog.conf separted by tabs and the log-files in questions
are existent with and chmod-ed 600.


Any ideas what could be wrong here - or put in another way - has
anybody out there got logging from Ciscos towards a FreeBSD box
running?

TIA for your help!
-ewald




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20070206110009.GA93053>