Hi Werner and All Mrs,<br><br>I solve my problem, the solution is:<br><br>I change the logging source-interface and the origin-id string I put the same string on my /etc/hosts of my syslog-ng server.<br><br>Now all of my configurations is:
<br><br><span style="font-weight: bold;">service timestamps debug datetime msec localtime show-timezone</span><br style="font-weight: bold;"><span style="font-weight: bold;">service timestamps log datetime msec localtime show-timezone
</span><br style="font-weight: bold;"><br style="font-weight: bold;"><span style="font-weight: bold;">logging trap debugging</span><br style="font-weight: bold;"><span style="font-weight: bold;">logging origin-id string (same of /etc/hosts)
</span><br style="font-weight: bold;"><span style="font-weight: bold;">logging source-interface Loopback0</span><br style="font-weight: bold;"><span style="font-weight: bold;">logging (my log server ip) </span><br><br>Thanks a lot for all suport!!!
<br><br>[]īs <br><br>Dud.<br><br><br><div><span class="gmail_quote">On 8/9/07, <b class="gmail_sendername">Werner Thal</b> <<a href="mailto:wt@krzn.de">wt@krzn.de</a>> wrote:</span><blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">
Hallo Robert,<br><br>I don't really think that this might be your problem, but before opening a cisco case you should try<br>the command "logging source-interface" and set this to the Management-Interface of the Router or
<br>an appropriate IP that ist routed, reachable from the syslog-ng and not blocked by any ACL/FW.<br>Please also check the "ip default-gateway" entry of the router.<br><br>C U<br>Werner<br><br>Am Donnerstag, 9. August 2007 10:03 schrieb Roberto Dud:
<br>> Yes,<br>><br>> I make a lot of tests, and I did check ACLīs and Firewall. Only problem is<br>> from Routers, switchs and servers work fine.<br>><br>> I think I will open a ticket in <a href="http://Cisco.com">
Cisco.com</a>, maybe.<br>><br>> Thanks,<br>><br>> Dud.<br>><br>><br>> On 8/9/07, Maurice Manurung <<a href="mailto:osmaniaindo@yahoo.com">osmaniaindo@yahoo.com</a>> wrote:<br>> ><br>> > Can you ping from other routers to the syslog-ng server and vice versa?
<br>> > Have you checked whether there is firewall or ACL in the router toward the<br>> > syslog server?<br>> ><br>> > Warm Regards,<br>> ><br>> > Maurice Manurung<br>> > <a href="http://www.flixya.com/referrer.php?ref=osmaniaindo">
http://www.flixya.com/referrer.php?ref=osmaniaindo</a><br>> ><br>> ><br>> ><br>> > ----- Original Message ----<br>> > From: Roberto Dud <<a href="mailto:roberto.dud@gmail.com">roberto.dud@gmail.com
</a>><br>> > To: Syslog-ng users' and developers' mailing list <<br>> > <a href="mailto:syslog-ng@lists.balabit.hu">syslog-ng@lists.balabit.hu</a>><br>> > Sent: Thursday, August 9, 2007 7:51:41 AM
<br>> > Subject: Re: [syslog-ng] Routers donīt send syslog<br>> ><br>> > Helo Mrs,<br>> ><br>> > Humm...maybe this is my problem. My syslog-ng server is behind a VLAN, the<br>> > only Router with send syslog messages for the server is the same router with
<br>> > my syslog-ng is conected.<br>> ><br>> > Other routers, donīt send. I run tcpdump on the server and donīt get<br>> > anyone messages, but in the routers everyhting is ok.<br>> ><br>> > Other equipments is ok, linux servers and switchs.
<br>> ><br>> > Have any idea?<br>> ><br>> > Thanks,<br>> ><br>> > Dud.<br>> ><br>> > On 8/8/07, John Hala < <a href="mailto:john.hala@villanova.edu">john.hala@villanova.edu
</a>> wrote:<br>> > ><br>> > > I had a similar issue where my Management VLAN was blackholing the<br>> > > messages and it was never getting to the syslog server. I don't know your<br>> > > setup, but I had to blow away this Management VLAN.
<br>> > ><br>> > > regards<br>> > ><br>> > > -----Original Message-----<br>> > > From: <a href="mailto:syslog-ng-bounces@lists.balabit.hu">syslog-ng-bounces@lists.balabit.hu</a>
[mailto:<a href="mailto:syslog-ng-bounces@lists.balabit.hu">syslog-ng-bounces@lists.balabit.hu</a><br>> > > ] On Behalf Of Werner Thal<br>> > > Sent: Wednesday, August 08, 2007 4:33 AM<br>> > > To: Syslog-ng users' and developers' mailing list
<br>> > > Subject: Re: [syslog-ng] Routers donīt send syslog<br>> > ><br>> > > Hallo Roberto,<br>> > ><br>> > > my Router-Config looks similar to yours, so I think this will be
<br>> > > correct.<br>> > > So did you check if the router-messages reach your syslog-ng server?<br>> > > If not, just use a sniffer like ethereal/wireshark for that.<br>> > ><br>> > > regards
<br>> > > Werner<br>> > ><br>> > ><br>> > ><br>> > > Am Mittwoch, 8. August 2007 05:08 schrieb Roberto Dud:<br>> > > > Mrs,<br>> > > ><br>> > > > I have a lot of Routers configured to send logs to syslog-ng, but
<br>> > > isnīt<br>> > > > work. Only 1 router send ok, others 10 not ok.<br>> > > ><br>> > > > My configuration on routers is the same:<br>> > > ><br>> > > > service timestamps debug datetime msec localtime show-timezone
<br>> > > > service timestamps log datetime msec localtime show-timezone<br>> > > ><br>> > > > logging <my ip><br>> > > > logging buffered 10000 debugging<br>> > > > logging trap debugging
<br>> > > ><br>> > > > I check with command :<br>> > > ><br>> > > > show logging<br>> > > ><br>> > > > And itīs ok, for me.<br>> > > ><br>
> > > > Anyone have a problema with routers?<br>> > > ><br>> > > > Thanks,<br>> > > ><br>> > > > Dud.<br>> > > ><br>> > ><br>> > > --
<br>> > ><br>> > > ___________________________________________________________________________<br>> > > A Linux-Server is like a tent: no windows, no gates and an apache<br>> > > inside...
<br>> > > _______________________________________________<br>> > > syslog-ng maillist - <a href="mailto:syslog-ng@lists.balabit.hu">syslog-ng@lists.balabit.hu</a><br>> > > <a href="https://lists.balabit.hu/mailman/listinfo/syslog-ng">
https://lists.balabit.hu/mailman/listinfo/syslog-ng</a><br>> > > Frequently asked questions at <a href="http://www.campin.net/syslog-ng/faq.html">http://www.campin.net/syslog-ng/faq.html</a><br>> > ><br>
> > > _______________________________________________<br>> > > syslog-ng maillist - <a href="mailto:syslog-ng@lists.balabit.hu">syslog-ng@lists.balabit.hu</a><br>> > > <a href="https://lists.balabit.hu/mailman/listinfo/syslog-ng">
https://lists.balabit.hu/mailman/listinfo/syslog-ng</a><br>> > > Frequently asked questions at <a href="http://www.campin.net/syslog-ng/faq.html">http://www.campin.net/syslog-ng/faq.html</a><br>> > ><br>
> > ><br>> ><br>> ><br>> > _______________________________________________<br>> > syslog-ng maillist - <a href="mailto:syslog-ng@lists.balabit.hu">syslog-ng@lists.balabit.hu</a><br>> >
<a href="https://lists.balabit.hu/mailman/listinfo/syslog-ng">https://lists.balabit.hu/mailman/listinfo/syslog-ng</a><br>> > Frequently asked questions at <a href="http://www.campin.net/syslog-ng/faq.html">http://www.campin.net/syslog-ng/faq.html
</a><br>> ><br>> ><br>> ><br>><br><br>--<br>___________________________________________________________________________<br>A Linux-Server is like a tent: no windows, no gates and an apache inside...<br>
_______________________________________________<br>syslog-ng maillist - <a href="mailto:syslog-ng@lists.balabit.hu">syslog-ng@lists.balabit.hu</a><br><a href="https://lists.balabit.hu/mailman/listinfo/syslog-ng">https://lists.balabit.hu/mailman/listinfo/syslog-ng
</a><br>Frequently asked questions at <a href="http://www.campin.net/syslog-ng/faq.html">http://www.campin.net/syslog-ng/faq.html</a><br><br></blockquote></div><br>