<br><font size=2 face="sans-serif">The syslog-ng server receives the messages.
The issue is the forwarding of the messages to a destination that is not
working. </font>
<br>
<br><font size=2 face="sans-serif">#sample syslog-ng.conf for a remote
client</font>
<br><font size=2 face="sans-serif">source src</font>
<br><font size=2 face="sans-serif"> {</font>
<br><font size=2 face="sans-serif">
udp (ip(0.0.0.0) port (514));</font>
<br><font size=2 face="sans-serif">
tcp (ip(0.0.0.0) port (514));</font>
<br>
<br><font size=2 face="sans-serif"> };</font>
<br>
<br><font size=2 face="sans-serif">destination loghos</font>
<br><font size=2 face="sans-serif"> {</font>
<br><font size=2 face="sans-serif">
udp ("172.22.134.58" port(514));</font>
<br><font size=2 face="sans-serif">
udp ("172.22.134.55" port(514));</font>
<br>
<br><font size=2 face="sans-serif">
};</font>
<br>
<br><font size=2 face="sans-serif">log
{</font>
<br><font size=2 face="sans-serif">
source (src); destination (loghos);</font>
<br><font size=2 face="sans-serif">
};</font>
<br>
<br>
<br>
<br>
<br>
<table width=100%>
<tr valign=top>
<td width=40%><font size=1 face="sans-serif"><b>"Geller, Sandor (IT)"
<Sandor.Geller@morganstanley.com></b> </font>
<br><font size=1 face="sans-serif">Sent by: syslog-ng-bounces@lists.balabit.hu</font>
<p><font size=1 face="sans-serif">07/05/2007 11:02 AM</font>
<table border>
<tr valign=top>
<td bgcolor=white>
<div align=center><font size=1 face="sans-serif">Please respond to<br>
Syslog-ng users' and developers' mailing list <syslog-ng@lists.balabit.hu></font></div></table>
<br>
<td width=59%>
<table width=100%>
<tr valign=top>
<td>
<div align=right><font size=1 face="sans-serif">To</font></div>
<td><font size=1 face="sans-serif">"Syslog-ng users' and developers'
mailing list" <syslog-ng@lists.balabit.hu></font>
<tr valign=top>
<td>
<div align=right><font size=1 face="sans-serif">cc</font></div>
<td>
<tr valign=top>
<td>
<div align=right><font size=1 face="sans-serif">Subject</font></div>
<td><font size=1 face="sans-serif">RE: [syslog-ng] SYSLOG RELAY CONF FILE</font></table>
<br>
<table>
<tr valign=top>
<td>
<td></table>
<br></table>
<br>
<br>
<br><font size=2><tt>Hello,<br>
<br>
> Hi, <br>
> I would like to use SYSLOG-NG to relay
syslog <br>
> messages received to multiple destinations. Through TCPDUMP
<br>
> I can tell I receive the messages but they aren't not being <br>
> sent to the destionations. Any help will be greatly <br>
> aprreciated of course... <br>
<br>
First check using netstat or lsof whether syslog-ng was able to<br>
bind to port 514 or not, and if yes then I propose using truss/<br>
strace to check whether syslog-ng receives the packets.<br>
<br>
Regards,<br>
<br>
Sandor<br>
--------------------------------------------------------<br>
<br>
NOTICE: If received in error, please destroy and notify sender. Sender
does not intend to waive confidentiality or privilege. Use of this email
is prohibited when received in error.<br>
_______________________________________________<br>
syslog-ng maillist - syslog-ng@lists.balabit.hu<br>
https://lists.balabit.hu/mailman/listinfo/syslog-ng<br>
Frequently asked questions at http://www.campin.net/syslog-ng/faq.html<br>
<br>
</tt></font>
<br>
<br>________________________________________________________
<FONT size=2><BR>
DTCC DISCLAIMER: This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you have received this email in error, please notify us immediately and delete the email and any attachments from your system. The recipient should check this email and any attachments for the presence of viruses. The company accepts no liability for any damage caused by any virus transmitted by this email.</FONT>