Syslog not logging remote host

web at 3dresearch.com web at 3dresearch.com
Sat Apr 14 05:44:18 UTC 2007


At 06:28 PM 4/13/2007, you wrote:
>web at 3dresearch.com writes:
> > Dag-Erling Smørgrav <des at des.no> writes:
> > > If 10.61.70.100 runs FreeBSD, syslogd_flags defaults to -s, which
> > > disables the listening socket.
> > Yes, 10.61.70.100 is running 5.5-STABLE, and I have in /etc/rc.conf there:
> >
> > syslogd_flags="-a 10.61.70.1/32"
>
>Check with tcpdump?
>
>DES
>--
>Dag-Erling Smørgrav - des at des.no

This is what I got on 10.61.70.100 (gww.floco.com is 10.61.70.1):

# tcpdump -r capture1
reading from file capture1, link-type EN10MB (Ethernet)
00:58:07.203800 IP gww.floco.com.syslog > 10.61.70.100.syslog: UDP, length: 126
00:58:33.295297 IP gww.floco.com.syslog > 10.61.70.100.syslog: UDP, length: 44
00:58:33.340779 IP gww.floco.com.syslog > 10.61.70.100.syslog: UDP, length: 49
00:59:21.436782 IP gww.floco.com.syslog > 10.61.70.100.syslog: UDP, length: 55
00:59:21.438125 IP gww.floco.com.syslog > 10.61.70.100.syslog: UDP, length: 71
00:59:21.439305 IP gww.floco.com.syslog > 10.61.70.100.syslog: UDP, length: 99
00:59:21.440458 IP gww.floco.com.syslog > 10.61.70.100.syslog: UDP, length: 92

...and more of the same.

--
Janos Dohanics




More information about the freebsd-questions mailing list