Hello,

I have following problem with respect to syslogd on fedora13.

With the following configuration in the /etc/syslog.conf i should be able to receive all syslog messages on localhost:514 port.

*.* @localhost

I am not getting anything on localhost:514. However if additionally i give following in conf file.

*.* @localhost
*.* @remoteIP

In the I am receiving syslog messages on remoteIP:514 server. I tried to see straces and in strace it does not show any hint about sending data to localhost:514.

Is this the normal behavior of syslogd or I am missing something in configuration?
--
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 08/18/2010 12:48 PM, Mansuri, Wasim (NSN - IN/Bangalore) wrote:
>
> Hello,
>
> I have following problem with respect to syslogd on fedora13.
>
> With the following configuration in the /etc/syslog.conf i should be able to receive all syslog messages on localhost:514 port.
>
> *.* @localhost
>
> I am not getting anything on localhost:514. However if additionally i give following in conf file.
>
> *.* @localhost
> *.* @remoteIP
>
> In the I am receiving syslog messages on remoteIP:514 server. I tried to see straces and in strace it does not show any hint about sending data to localhost:514.
>
> Is this the normal behavior of syslogd or I am missing something in configuration?

Just a very quick suggestion, did you try:-

*.* @127.0.0.1

Or try :-

*.* @<IP ADDRESS OF THE MACHINE>

I'm not saying it *will* work, but just a very quick suggestion that may
be worth trying...

You may also need to add the "-r" option to syslogd's service config file...

Again, just a thought....

- --
Gavin Spurgeon.
gspurgeon@redhat.com
Red Hat GLS Instructor EMEA
Red Hat UK Ltd
64 Baker Street
4th Floor, London, W1U 7DF
Mob: +44 7841 231160
Desk: +44 0207 009 4429 (Direct)
Tel: +44 1252 362709
Fax: +44 1252 548116


Registered in England and Wales under Company Registration No. 03798903
Directors: Michael Cunningham (USA), Brendan Lane (Ireland), Matt Parson
(USA), Charlie Peters (USA)
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.14 (GNU/Linux)
Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org/

iEYEARECAAYFAkxrzAcACgkQvp6arS3vDirpRQCg0CqFIqaEbr R83W3/UH7isiKk
jqoAn2Q+sCVOIzfWs3Dg9yMTYP8Z65k6
=m9/H
-----END PGP SIGNATURE-----
--
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines

Mansuri, Wasim (NSN - IN/Bangalore) wrote:
> Hello,
>
> I have following problem with respect to syslogd on fedora13.
>
> With the following configuration in the /etc/syslog.conf i should be able to receive all syslog messages on localhost:514 port.
>
> *.* @localhost
>
> I am not getting anything on localhost:514. However if additionally i give following in conf file.
>
> *.* @localhost
> *.* @remoteIP
>
> In the I am receiving syslog messages on remoteIP:514 server. I tried to see straces and in strace it does not show any hint about sending data to localhost:514.
>
> Is this the normal behavior of syslogd or I am missing something in configuration?

I don't have any idea what you are trying to do, but are you aware that you can
send syslog to a fifo (named pipe) and read from that?

My mail server pipes error messages to a fifo read by a perl program which plays
with iptables rules for evil incoming connections.


--
Bill Davidsen <davidsen@tmr.com>
"We have more to fear from the bungling of the incompetent than from
the machinations of the wicked." - from Slashdot
--
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines

@Bill,
I am running one more server which is processing the system messages. Server is being recompiled on fedora and I don't want to change the parsing and other logic just for fedora flavor of my server. Other wise using named pipe is good option.

-----Original Message-----
From: Bill Davidsen [mailto:davidsen@tmr.com]
Sent: Wednesday, August 18, 2010 11:35 PM
To: Community support for Fedora users
Subject: Re: forwarding Syslog messages on localhost:514

Mansuri, Wasim (NSN - IN/Bangalore) wrote:
> Hello,
>
> I have following problem with respect to syslogd on fedora13.
>
> With the following configuration in the /etc/syslog.conf i should be able to receive all syslog messages on localhost:514 port.
>
> *.* @localhost
>
> I am not getting anything on localhost:514. However if additionally i give following in conf file.
>
> *.* @localhost
> *.* @remoteIP
>
> In the I am receiving syslog messages on remoteIP:514 server. I tried to see straces and in strace it does not show any hint about sending data to localhost:514.
>
> Is this the normal behavior of syslogd or I am missing something in configuration?

I don't have any idea what you are trying to do, but are you aware that you can
send syslog to a fifo (named pipe) and read from that?

My mail server pipes error messages to a fifo read by a perl program which plays
with iptables rules for evil incoming connections.


--
Bill Davidsen <davidsen@tmr.com>
"We have more to fear from the bungling of the incompetent than from
the machinations of the wicked." - from Slashdot

--
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines

I have also tried to give an ip instead of localhost. What I observed is.

any IP configured on the machine doesn't work.
If I give IP which does not exist at all and after bringing up syslogd I create alias of any interface with the IP given will work.



-----Original Message-----
From: Gavin Spurgeon [mailto:gspurgeon@redhat.com]
Sent: Wednesday, August 18, 2010 5:33 PM
To: Community support for Fedora users
Subject: Re: forwarding Syslog messages on localhost:514

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 08/18/2010 12:48 PM, Mansuri, Wasim (NSN - IN/Bangalore) wrote:
>
> Hello,
>
> I have following problem with respect to syslogd on fedora13.
>
> With the following configuration in the /etc/syslog.conf i should be able to receive all syslog messages on localhost:514 port.
>
> *.* @localhost
>
> I am not getting anything on localhost:514. However if additionally i give following in conf file.
>
> *.* @localhost
> *.* @remoteIP
>
> In the I am receiving syslog messages on remoteIP:514 server. I tried to see straces and in strace it does not show any hint about sending data to localhost:514.
>
> Is this the normal behavior of syslogd or I am missing something in configuration?

Just a very quick suggestion, did you try:-

*.* @127.0.0.1

Or try :-

*.* @<IP ADDRESS OF THE MACHINE>

I'm not saying it *will* work, but just a very quick suggestion that may
be worth trying...

You may also need to add the "-r" option to syslogd's service config file...

Again, just a thought....

- --
Gavin Spurgeon.
gspurgeon@redhat.com
Red Hat GLS Instructor EMEA
Red Hat UK Ltd
64 Baker Street
4th Floor, London, W1U 7DF
Mob: +44 7841 231160
Desk: +44 0207 009 4429 (Direct)
Tel: +44 1252 362709
Fax: +44 1252 548116


Registered in England and Wales under Company Registration No. 03798903
Directors: Michael Cunningham (USA), Brendan Lane (Ireland), Matt Parson
(USA), Charlie Peters (USA)
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.14 (GNU/Linux)
Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org/

iEYEARECAAYFAkxrzAcACgkQvp6arS3vDirpRQCg0CqFIqaEbr R83W3/UH7isiKk
jqoAn2Q+sCVOIzfWs3Dg9yMTYP8Z65k6
=m9/H
-----END PGP SIGNATURE-----

--
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines