kernel message buffer not sent to remote syslog

[Robin Gruyters]

Hi ya,

A few weeks ago I have upgraded a few of our systems to FREEBSD 5.4
(-rRELENG_5_4). I noticed that it won't sent any system messages (which is
available in the buffer. e.g. boot messages), to the remote loghost anymore.

Has anything changed in the handeling of system messages since FreeBSD 5.3?

Here my syslog.conf
[syslog.conf]
# $FreeBSD: src/etc/syslog.conf,v 1.26.6.2 2005/03/16 13:39:59 glebius Exp $
#
#       Spaces ARE valid field separators in this file. However,
#       other *nix-like systems still insist on using tabs as field
#       separators. If you are sharing this file between systems, you
#       may want to use only tabs as field separators here.
#       Consult the syslog.conf(5) manpage.
*.err;kern.warning;auth.notice;mail.crit                /dev/console
*.notice;authpriv.none;kern.debug;lpr.info;mail.crit;news.err  
/var/log/messages
security.*                                      /var/log/security
auth.info;authpriv.info                         /var/log/auth.log
mail.info                                       /var/log/maillog
lpr.info                                        /var/log/lpd-errs
ftp.info                                        /var/log/xferlog
cron.*                                          /var/log/cron
*.=debug                                        /var/log/debug.log
*.emerg                                         *
# uncomment this to log all writes to /dev/console to /var/log/console.log
#console.info                                   /var/log/console.log
# uncomment this to enable logging of all log messages to /var/log/all.log
# touch /var/log/all.log and chmod it to mode 600 before it will work
*.*                                             /var/log/all.log
# uncomment this to enable logging to a remote loghost named loghost
*.*                                             @10.8.0.2
# uncomment these if you're running inn
# news.crit                                     /var/log/news/news.crit
# news.err                                      /var/log/news/news.err
# news.notice                                   /var/log/news/news.notice
!startslip
*.*                                             /var/log/slip.log
!ppp
*.*                                             /var/log/ppp.log
[/end]

I have also noticed that it will sent the messages to the /var/log/all.log, but
not to the remote host.


Regards,
-- 
Robin Gruyters
Network and Security Engineer
Yirdis B.V. / Betronic Services
I: http://yirdis.com