Re: log server
On Tue, May 15, 2001 at 09:52:25PM -0500, ktb wrote:
> On Tue, May 15, 2001 at 09:50:39PM -0500, Bryan Andersen wrote:
> > ktb wrote:
> > >
> > > I've set up a log server, which I fire up as -
> > > /sbin/syslogd -r
> > >
> > > The machine I'm logging from I've recompiled Debian source and pointed it
> > > to a different syslog.conf file. I've got it set up to log as normal
> > > but also log to the server, with the following -
> > > *.* @host
> > So your loghost machine is "host"?
> > Try looking at the logs on the source machine. Look for error
> > lines from syslogd.
> No the real name isn't "host" but the line points to the log server.
> No errors in the logs. Everything is being logged as normal to console
> and the log files. Just not fully logging to the remote log server.
Please use tcpdump to test to see if traffic is actually being generated.
(assuming eth0 is the right interface) that would be:
tcpdump -ni eth0 dst or src syslog and udp port 514