Syslog not logging

[Brian Candler]

On Fri, Jul 22, 2005 at 06:58:40PM -0400, Tuc at T-B-O-H wrote:
> 	I'm trying to get syslog to log output from a 7 machines and 4 
> routers, all in the same subnet. My syslog is started as such :
> 
>   301  ??  Ss     0:19.82 /usr/sbin/syslogd -l /var/run/log -l /var/named/var/run/log -a 192.168.3.0/24
> 
> 
> 	my syslog.conf has :
> 
> *.debug				/var/log/spool
> 
> 
> 	For all the servers, everything is perfect. Its the routers that
> are a problem. When I TCPDUMP it, I get :
> 
> 18:50:56.736979 IP 192.136.64.2.8888 > 192.136.64.108.514: UDP, ...
                                  ^^^^

syslogd by default only accepts packets with source port 514. If the routers
use the same static port then "-a 192.168.3.0/24:8888" will allow it;
otherwise "-a 192.168.3.0/24:*" will allow from all ports.

Regards,

Brian.