«

Hi,
I've these entries on my router:
logging facility local0
logging source-interface FastEthernet0
logging x.y.z.y

In my freebsd box /etc/syslogd.conf file:
local0.* /var/log/cisco.log

When running tcpdump, I can see that a syslog message arrives at my freebsd
box:
14:37:50.785983 myrouter.57372 > x.y.z.y.syslog: udp 77

The file /var/log/cisco.log has no entries, why, what did I misconfigure?

thx a lot?

Of course )
> Of course you did restart the syslogd?
>
>
>
> --
> Us - http://www.sweet-sorrow.com
> -----
> All trespassers will be shot,
> survivers will be shot again.
> Remove the bizzare part of address to reply by e-mail.

Didier wrote:

> Of course )

And are you passing the switch to syslogd
which tells it to accept remote messages?

>> Of course you did restart the syslogd?



--
http://www.mailtrap.org.uk/

show logg is your friend...

How many log does it say it have sent ?

Or try :
logg on
logg trap deb
HTH
Martin Bilgrav

"Didier" <> wrote in message
news:4003f694$...
> Hi,
> I've these entries on my router:
> logging facility local0
> logging source-interface FastEthernet0
> logging x.y.z.y
>
> In my freebsd box /etc/syslogd.conf file:
> local0.* /var/log/cisco.log
>
> When running tcpdump, I can see that a syslog message arrives at my
freebsd
> box:
> 14:37:50.785983 myrouter.57372 > x.y.z.y.syslog: udp 77
>
> The file /var/log/cisco.log has no entries, why, what did I misconfigure?
>
> thx a lot?
>
>

In article <4003f694$>, Didier <> wrote:
>Hi,
>I've these entries on my router:
>logging facility local0
>logging source-interface FastEthernet0
>logging x.y.z.y
>
>In my freebsd box /etc/syslogd.conf file:
>local0.* /var/log/cisco.log
>
.. . .
>
>The file /var/log/cisco.log has no entries, why, what did I misconfigure?

Typical syslog failure causes (from most to least likely
1 - not restarting syslogd after making changes
2 - syslogd not configured to log remote systems
3 - log file specified does not exist
4 - log file exists but syslogd lacks permission to append to it
5 - software defects

Good luck and good hunting!
--
Vincent C Jones, Consultant Expert advice and a helping hand
Networking Unlimited, Inc. for those who want to manage and
Tenafly, NJ Phone: 201 568-7810 control their networking destiny
http://www.networkingunlimited.com

On Tue, 13 Jan 2004 14:45:59 +0100
"Didier" <> wrote:

> Hi,
> I've these entries on my router:
> logging facility local0
> logging source-interface FastEthernet0
> logging x.y.z.y
>
> In my freebsd box /etc/syslogd.conf file:
> local0.* /var/log/cisco.log
>
> When running tcpdump, I can see that a syslog message arrives at my
> freebsd box:
> 14:37:50.785983 myrouter.57372 > x.y.z.y.syslog: udp 77
>
> The file /var/log/cisco.log has no entries, why, what did I
> misconfigure?
>
> thx a lot?
>
>

Of course you did restart the syslogd?



--
Us - http://www.sweet-sorrow.com
-----
All trespassers will be shot,
survivers will be shot again.
Remove the bizzare part of address to reply by e-mail.

"Didier" <> wrote in message
news:4003f694$...

> In my freebsd box /etc/syslogd.conf file:
> local0.* /var/log/cisco.log

Make sure you don't have something higher up you config that may be
swallowing your messages.

I had:
*.info;mail.none;authpriv.none;cron.none /var/log/messages

in mine that was swallowing all the info messages. I had to change it to:
*.info;mail.none;authpriv.none;cron.none;local5.no ne
/var/log/messages

to not swallow the local5 ones too.

Richard.

> And are you passing the switch to syslogd
> which tells it to accept remote messages?
What do you mean by "passing the switch to syslogd"?

have you restarted syslogd with remote host logging enabled? I think you
do this by running syslogd -h? If in doubt man syslogd


vern

On Tue, 13 Jan 2004 16:59:19 +0000, vern wrote:

> have you restarted syslogd with remote host logging enabled? I think you
> do this by running syslogd -h? If in doubt man syslogd
>
>
> vern

sorry that should be syslogd -r