From owner-freebsd-questions@FreeBSD.ORG Sun Dec 5 22:21:15 2010 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 8AC381065670 for ; Sun, 5 Dec 2010 22:21:15 +0000 (UTC) (envelope-from kayasaman@gmail.com) Received: from mail-bw0-f54.google.com (mail-bw0-f54.google.com [209.85.214.54]) by mx1.freebsd.org (Postfix) with ESMTP id 153958FC0C for ; Sun, 5 Dec 2010 22:21:14 +0000 (UTC) Received: by bwz2 with SMTP id 2so10486187bwz.13 for ; Sun, 05 Dec 2010 14:21:14 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:received:received:message-id:date:from :user-agent:mime-version:to:subject:content-type :content-transfer-encoding; bh=pKZ1cShqoPdjA5OIlUbgH1yZxfL96TP7ZGZEGGPj43Y=; b=s30IEhpEBsWSZbayDKV6knNY3FMLewTfzzdqsKlWx4lgwPB5JKXmjfAfOXHCaJBHer ieobK39SV3QgC0Lg6WdeqMmIL4COUGFzSyXYjB2ywoaiyULcm70wtA9qUwhDSt2vxWf0 Wum5zhJauBfLquLKfgDyDm5BheDFEP11RJoHI= DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=message-id:date:from:user-agent:mime-version:to:subject :content-type:content-transfer-encoding; b=k8Yl7+zy4h8ttM5NrpBn9q+kAxqlA+f6TYYNpVKUNQA1OnPvHjNAd3O4I8UkbFC/Ov cTjGrqm1xNRop8QwH27raeW+U7GdvQZQswdeaeTBCPIe9ABMMuL/BpVj6u+V1EdUQ/2V tYtTIxqDhwKg4OjYFwVD+GZVQ0kWpsAI8MVTA= Received: by 10.204.68.81 with SMTP id u17mr5011311bki.207.1291585837354; Sun, 05 Dec 2010 13:50:37 -0800 (PST) Received: from [172.16.0.66] ([78.189.216.140]) by mx.google.com with ESMTPS id g8sm2121196bkg.23.2010.12.05.13.50.34 (version=SSLv3 cipher=RC4-MD5); Sun, 05 Dec 2010 13:50:36 -0800 (PST) Message-ID: <4CFC0908.9020602@gmail.com> Date: Sun, 05 Dec 2010 23:50:00 +0200 From: Kaya Saman User-Agent: Mozilla/5.0 (X11; U; Linux i686 (x86_64); en-US; rv:1.9.1.8) Gecko/20100227 Lightning/1.0b1 Thunderbird/3.0.3 MIME-Version: 1.0 To: freebsd-questions@freebsd.org Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Subject: syslogd not writing to file? X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 05 Dec 2010 22:21:15 -0000 Hi, I've got a weird problem that might be a bug with the 64bit RELEASE edition of FreeBSD 8.0. The issue is this: I provisioned 2 servers on two separate networks; one a 32bit system and the other a 64bit in order to log information coming from Cisco network equipment. The 32bit build works perfectly using the config below, however the 64bit version won't write the files as needed??? The /etc/syslog.conf file looks as such: # $FreeBSD: src/etc/syslog.conf,v 1.30.2.1.2.1 2009/10/25 01:10:29 kensmith Exp $ # # Spaces ARE valid field separators in this file. However, # other *nix-like systems still insist on using tabs as field # separators. If you are sharing this file between systems, you # may want to use only tabs as field separators here. # Consult the syslog.conf(5) manpage. +Zeta-Ray.optiplex-networks.com *.err;kern.warning;auth.notice;mail.crit /dev/console *.notice;authpriv.none;kern.debug;lpr.info;mail.crit;news.err /var/log/messages security.* /var/log/security auth.info;authpriv.info /var/log/auth.log mail.info /var/log/maillog lpr.info /var/log/lpd-errs ftp.info /var/log/xferlog cron.* /var/log/cron *.=debug /var/log/debug.log *.emerg * # uncomment this to log all writes to /dev/console to /var/log/console.log #console.info /var/log/console.log # uncomment this to enable logging of all log messages to /var/log/all.log # touch /var/log/all.log and chmod it to mode 600 before it will work #*.* /var/log/all.log # uncomment this to enable logging to a remote loghost named loghost #*.* @loghost # uncomment these if you're running inn # news.crit /var/log/news/news.crit # news.err /var/log/news/news.err # news.notice /var/log/news/news.notice !ppp *.* /var/log/ppp.log !* +192.168.1.1 *.* /var/log/cisco857w.log !* +172.16.0.1 *.* /var/log/cisco1801w.log With the files having these permissions: -rw-r--r-- 1 root wheel 0 Dec 5 17:02 cisco1801w.log -rw-r--r-- 1 root wheel 0 Dec 5 19:32 cisco857w.log I also added these lines to the /etc/rc.conf file: syslogd_enable="YES" #syslogd_flags="-d -b 192.168.1.120 -a 192.168.1.1/32:* -a 172.16.0.1/32:* -vv" syslogd_flags="" Using debugging by putting -d -vv within the comments of the last line I was able to see information get transferred to my server from the devices in question, however the FILE parameter was never specified meaning that nothing was getting written to the files created. The 32bit build works perfectly on a different network with the same config just different device IP's. The system hasn't had any packages updated though unlike the 64bit edition which might interfere with the build somehow. I also run BSD Jails on the 64bit server too so I don't know if something from that part is affecting things? It's a very odd problem and I don't know if anyone can give me any insight into this? I mean information is getting to the server as I can see it while running the debug with the -d -vv flags set in place, however nothing is being written! Can anyone help or suggest anything? Thanks, Kaya