From owner-freebsd-questions@FreeBSD.ORG Tue Feb 6 13:03:36 2007 Return-Path: X-Original-To: freebsd-questions@freebsd.org Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [69.147.83.52]) by hub.freebsd.org (Postfix) with ESMTP id A159616A400 for ; Tue, 6 Feb 2007 13:03:35 +0000 (UTC) (envelope-from a@jenisch.at) Received: from srvdmz13.oekb.co.at (srvdmz13.oekb.co.at [143.245.5.103]) by mx1.freebsd.org (Postfix) with ESMTP id 030EF13C442 for ; Tue, 6 Feb 2007 13:03:34 +0000 (UTC) (envelope-from a@jenisch.at) X-SEF-Processed: 5_0_0_910__2007_02_06_14_03_33 X-SEF-7853D99-ADF1-478E-8894-213D316B8FFA: 1 Received: from msc01-n1 [143.245.2.187] by srvdmz13.oekb.co.at - SurfControl E-mail Filter (5.2.1); Tue, 06 Feb 2007 14:03:33 +0100 Received: from aurora.oekb.co.at ([143.245.9.16]) by MAIL1.oekb.co.at with Microsoft SMTPSVC(6.0.3790.2499); Tue, 6 Feb 2007 14:03:33 +0100 Received: from aurora.oekb.co.at (localhost.oekb.co.at [127.0.0.1]) by aurora.oekb.co.at (8.13.8/8.13.8) with ESMTP id l16D3WmN078665 for ; Tue, 6 Feb 2007 14:03:33 +0100 (CET) (envelope-from a@jenisch.at) Received: (from ej@localhost) by aurora.oekb.co.at (8.13.8/8.13.8/Submit) id l16D3W6v078664 for freebsd-questions@freebsd.org; Tue, 6 Feb 2007 14:03:32 +0100 (CET) (envelope-from a@jenisch.at) X-Authentication-Warning: aurora.oekb.co.at: ej set sender to a@jenisch.at using -f Date: Tue, 6 Feb 2007 14:03:32 +0100 From: Ewald Jenisch To: freebsd-questions@freebsd.org Message-ID: <20070206130332.GA33414@aurora.oekb.co.at> References: <20070206110009.GA93053@aurora.oekb.co.at> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <20070206110009.GA93053@aurora.oekb.co.at> User-Agent: Mutt/1.4.2.2i X-OriginalArrivalTime: 06 Feb 2007 13:03:33.0647 (UTC) FILETIME=[34E039F0:01C749EF] Subject: syslog behaving differently with "-d" (was: "syslog from Cisco -> FreeBSD not working") X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 06 Feb 2007 13:03:36 -0000 On Tue, Feb 06, 2007 at 12:00:09PM +0100, Ewald Jenisch wrote: > Hi, > > I'm running into a problem configuring my syslogd in order to accept > messages from Routers (Cisco). > > > Here's what I did in my syslog.conf: > local7.* /var/log/cisco-syslog Hi, A couple of hours after my original question I found out an interesting point: When running syslogd with the "-d" (debug-flag) messages get written into the file configured in /etc/syslog.conf - when running without the debug-flag nothing gets written. To be specific: With the above syslog.conf entry and /etc/rc.conf containting 'syslogd_flags="-d"' I get the following output on the console: cvthname(192.168.9.95) logmsg: pri 275, flags 0, from switch1-1, msg 1390: Feb 6 13:59:40 MET: %SYS-5-CONFIG_I: Configured from console by ej1 on vty0 (192.168.9.16) Logging to FILE /var/log/cisco-syslog Sure enough this log message is in the cisco-syslog file. As soon as I turn off debug in syslog (i.e. running without the "-d" flag) nothing gets written to the cisco-syslog file. Why are messages only written to the file when running syslogd in debug mode?? TIA for any clue, -ewald