<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
<meta name="Generator" content="Microsoft Word 10 (filtered)">
<style>
<!--
/* Font Definitions */
@font-face
{font-family:Tahoma;
panose-1:2 11 6 4 3 5 4 4 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman";
color:black;}
a:link, span.MsoHyperlink
{color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{color:blue;
text-decoration:underline;}
pre
{margin:0cm;
margin-bottom:.0001pt;
font-size:10.0pt;
font-family:"Courier New";
color:black;}
span.EmailFormatvorlage18
{font-family:Arial;
color:navy;}
@page Section1
{size:595.3pt 841.9pt;
margin:70.85pt 70.85pt 2.0cm 70.85pt;}
div.Section1
{page:Section1;}
-->
</style>
</head>
<body bgcolor="white" lang="DE" link="blue" vlink="blue">
<div class="Section1">
<p class="MsoNormal"><font size="2" color="navy" face="Arial"><span style="font-size:
10.0pt;font-family:Arial;color:navy">Hi Zoltán,</span></font></p>
<p class="MsoNormal"><font size="2" color="navy" face="Arial"><span style="font-size:
10.0pt;font-family:Arial;color:navy"> </span></font></p>
<p class="MsoNormal"><font size="2" color="navy" face="Arial"><span lang="EN-GB" style="font-size:10.0pt;font-family:Arial;color:navy">thanks for you support! The problem was, that the windows clients only uses tcp for connecting to the syslog-ng server. It
works now, by creating a tcp source.</span></font></p>
<p class="MsoNormal"><font size="2" color="navy" face="Arial"><span lang="EN-GB" style="font-size:10.0pt;font-family:Arial;color:navy"> </span></font></p>
<p class="MsoNormal"><font size="2" color="navy" face="Arial"><span lang="EN-GB" style="font-size:10.0pt;font-family:Arial;color:navy"> </span></font></p>
<p class="MsoNormal"><font size="2" color="navy" face="Arial"><span lang="EN-GB" style="font-size:10.0pt;font-family:Arial;color:navy">Best,
</span></font></p>
<p class="MsoNormal"><font size="2" color="navy" face="Arial"><span lang="EN-GB" style="font-size:10.0pt;font-family:Arial;color:navy">René</span></font></p>
<p class="MsoNormal"><font size="2" color="navy" face="Arial"><span lang="EN-GB" style="font-size:10.0pt;font-family:Arial;color:navy"> </span></font></p>
<div>
<p class="MsoNormal"><font size="2" color="black" face="Arial"><span lang="EN-GB" style="font-size:10.0pt;font-family:Arial"> </span></font></p>
<p class="MsoNormal"><font size="2" color="black" face="Arial"><span lang="EN-GB" style="font-size:10.0pt;font-family:Arial"> </span></font></p>
</div>
<p class="MsoNormal" style="margin-left:35.4pt"><font size="2" color="black" face="Tahoma"><span lang="EN-GB" style="font-size:10.0pt;font-family:Tahoma;
color:windowtext">----</span></font><font size="2" color="black" face="Tahoma"><span style="font-size:10.0pt;font-family:Tahoma;color:windowtext">-Ursprüngliche
Nachricht-----<br>
<b><span style="font-weight:bold">Von:</span></b> Zoltán Pallagi [mailto:pzolee@balabit.hu]
<br>
<b><span style="font-weight:bold">Gesendet:</span></b> Mittwoch, 17. Februar 2010 10:06<br>
<b><span style="font-weight:bold">An:</span></b> Syslog-ng users' and developers' mailing list;
</span></font><font size="2" color="black" face="Tahoma"><span style="font-size:10.0pt;font-family:Tahoma;color:windowtext">Heinze, René</span></font><font size="2" color="black" face="Tahoma"><span style="font-size:10.0pt;font-family:Tahoma;
color:windowtext"><br>
<b><span style="font-weight:bold">Betreff:</span></b> Re: [syslog-ng] Problem with windows client</span></font></p>
<p class="MsoNormal" style="margin-left:35.4pt"><font size="3" color="black" face="Times New Roman"><span style="font-size:12.0pt"> </span></font></p>
<p class="MsoNormal" style="margin-left:35.4pt"><font size="3" color="black" face="Times New Roman"><span style="font-size:12.0pt">Hi Rene,<br>
<br>
It seems that your server doesn't exist or drops the agent connection.<br>
Please check the following changes in your agent configuration and fix them if they are not correct:<br>
-server address<br>
-server port<br>
-SSL usage (perhaps, your server wants to use ssl but your agent doesn't)<br>
<br>
If everything is correct, start the syslog-ng in debug mode (syslog-ng -Fevd) and I think you will see the reason for this behaviour.<br>
<br>
If you can't solve this problem, send me your agent and server configuration, please.<br>
(for more information about debbuging syslog-ng/agent, see my blog: <a href="http://pzolee.blogs.balabit.com/">
http://pzolee.blogs.balabit.com/</a>)<br>
<br>
Heinze írta: </span></font></p>
<pre style="margin-left:35.4pt" wrap=""><font size="2" color="black" face="Courier New"><span style="font-size:10.0pt">Good morning,</span></font></pre>
<pre style="margin-left:35.4pt"><font size="2" color="black" face="Courier New"><span style="font-size:10.0pt"> </span></font></pre>
<pre style="margin-left:
35.4pt"><font size="2" color="black" face="Courier New"><span style="font-size:
10.0pt">I´m using syslog-ng on a sles 10 server acting as a syslog-ng server</span></font></pre>
<pre style="margin-left:35.4pt"><font size="2" color="black" face="Courier New"><span style="font-size:10.0pt">and a sles 10 server acting as a syslog-ng client. The clients logs</span></font></pre>
<pre style="margin-left:35.4pt"><font size="2" color="black" face="Courier New"><span style="font-size:10.0pt">successfully everything to the server.</span></font></pre>
<pre style="margin-left:35.4pt"><font size="2" color="black" face="Courier New"><span style="font-size:10.0pt">I added a Windows XP Professional SP2 client and installed the</span></font></pre>
<pre style="margin-left:35.4pt"><font size="2" color="black" face="Courier New"><span style="font-size:10.0pt">syslog-ng client for windows. But unfortunately the windows syslog-ng</span></font></pre>
<pre style="margin-left:35.4pt"><font size="2" color="black" face="Courier New"><span style="font-size:10.0pt">client is not able to connect to the server. The only thing i</span></font></pre>
<pre style="margin-left:35.4pt"><font size="2" color="black" face="Courier New"><span style="font-size:10.0pt">configured is the ip of the syslog-ng server.</span></font></pre>
<pre style="margin-left:35.4pt"><font size="2" color="black" face="Courier New"><span style="font-size:10.0pt">I attached the debug log to this email. What am I doing wrong? The is</span></font></pre>
<pre style="margin-left:35.4pt"><font size="2" color="black" face="Courier New"><span style="font-size:10.0pt">no firewall causing the problem. On the syslog-ng server i see</span></font></pre>
<pre style="margin-left:35.4pt"><font size="2" color="black" face="Courier New"><span style="font-size:10.0pt">incoming packages from the windows host using tcpdump.</span></font></pre>
<pre style="margin-left:35.4pt"><font size="2" color="black" face="Courier New"><span style="font-size:10.0pt"> </span></font></pre>
<pre style="margin-left:
35.4pt"><font size="2" color="black" face="Courier New"><span style="font-size:
10.0pt"> </span></font></pre>
<pre style="margin-left:35.4pt"><font size="2" color="black" face="Courier New"><span style="font-size:10.0pt"> </span></font></pre>
<pre style="margin-left:35.4pt"><font size="2" color="black" face="Courier New"><span style="font-size:10.0pt">Best regards,</span></font></pre>
<pre style="margin-left:35.4pt"><font size="2" color="black" face="Courier New"><span style="font-size:10.0pt"> </span></font></pre>
<pre style="margin-left:
35.4pt"><font size="2" color="black" face="Courier New"><span style="font-size:
10.0pt">René Heinze</span></font></pre>
<pre style="margin-left:35.4pt"><font size="2" color="black" face="Courier New"><span style="font-size:10.0pt"> </span></font></pre>
<pre style="margin-left:35.4pt"><font size="2" color="black" face="Courier New"><span style="font-size:10.0pt"> </span></font></pre>
<pre style="margin-left:
35.4pt"><font size="2" color="black" face="Courier New"><span style="font-size:
10.0pt">Besuchen Sie die Bundesdruckerei auf der CeBIT 2010 vom 2.-6.3.2010, Halle 9, Stand D80</span></font></pre>
<pre style="margin-left:35.4pt"><font size="2" color="black" face="Courier New"><span style="font-size:10.0pt">Visit Bundesdruckerei at CeBIT, exhibition centre, hall 9 / stand D80</span></font></pre>
<pre style="margin-left:35.4pt"><font size="2" color="black" face="Courier New"><span style="font-size:10.0pt"> </span></font></pre>
<pre style="margin-left:
35.4pt"><font size="2" color="black" face="Courier New"><span style="font-size:
10.0pt">weitere Informationen unter: <a href="http://www.bundesdruckerei.de/de/unternehmen/untern_cebit2010/index.html">http://www.bundesdruckerei.de/de/unternehmen/untern_cebit2010/index.html</a></span></font></pre>
<pre style="margin-left:35.4pt"><font size="2" color="black" face="Courier New"><span style="font-size:10.0pt">find more information here <a href="http://www.bundesdruckerei.de/en/company/comp_cebit2010/index.html">http://www.bundesdruckerei.de/en/company/comp_cebit2010/index.html</a></span></font></pre>
<pre style="margin-left:35.4pt"><font size="2" color="black" face="Courier New"><span style="font-size:10.0pt"> </span></font></pre>
<pre style="margin-left:35.4pt" wrap=""><font size="2" color="black" face="Courier New"><span style="font-size:
10.0pt"> </span></font></pre>
<pre style="margin-left:35.4pt;text-align:
center"><font size="2" color="black" face="Courier New"><span style="font-size:
10.0pt">
<hr size="4" width="90%" align="center">
</span></font></pre>
<pre style="margin-left:35.4pt"><font size="2" color="black" face="Courier New"><span style="font-size:10.0pt"> </span></font></pre>
<pre style="margin-left:35.4pt"><font size="2" color="black" face="Courier New"><span style="font-size:10.0pt">______________________________________________________________________________</span></font></pre>
<pre style="margin-left:35.4pt"><font size="2" color="black" face="Courier New"><span style="font-size:10.0pt">Member info: <a href="https://lists.balabit.hu/mailman/listinfo/syslog-ng">https://lists.balabit.hu/mailman/listinfo/syslog-ng</a></span></font></pre>
<pre style="margin-left:35.4pt"><font size="2" color="black" face="Courier New"><span style="font-size:10.0pt">Documentation: <a href="http://www.balabit.com/support/documentation/?product=syslog-ng">http://www.balabit.com/support/documentation/?product=syslog-ng</a></span></font></pre>
<pre style="margin-left:35.4pt"><font size="2" color="black" face="Courier New"><span style="font-size:10.0pt">FAQ: <a href="http://www.campin.net/syslog-ng/faq.html">http://www.campin.net/syslog-ng/faq.html</a></span></font></pre>
<pre style="margin-left:35.4pt"><font size="2" color="black" face="Courier New"><span style="font-size:10.0pt"> </span></font></pre>
<p class="MsoNormal" style="margin-left:35.4pt"><font size="3" color="black" face="Times New Roman"><span style="font-size:12.0pt"><br>
<br>
<br>
</span></font></p>
<pre style="margin-left:35.4pt"><font size="2" color="black" face="Courier New"><span style="font-size:10.0pt">-- </span></font></pre>
<pre style="margin-left:35.4pt"><font size="2" color="black" face="Courier New"><span style="font-size:10.0pt">pzolee</span></font></pre>
</div>
<br>
<hr>
<font face="Arial" color="Red" size="2"><br>
Besuchen Sie die Bundesdruckerei auf der CeBIT 2010 vom 2.-6.3.2010, Halle 9, Stand D80<br>
Visit Bundesdruckerei at CeBIT, exhibition centre, hall 9 / stand D80<br>
<br>
weitere Informationen unter: http://www.bundesdruckerei.de/de/unternehmen/untern_cebit2010/index.html<br>
find more information here http://www.bundesdruckerei.de/en/company/comp_cebit2010/index.html<br>
</font>
</body>
</html>