True. But it's a simpler way if you are talking syslog-ng to syslog-ng box.<div>If you want the actual UDP rewrite, you will have to recompile.</div><div>There are guys on the list that can help there - I'm not the guru for that :-)</div>
<div><br clear="all">______________________________________________________________ <br><br>Clayton Dukes<br>______________________________________________________________<br>
<br><br><div class="gmail_quote">On Tue, Sep 27, 2011 at 9:07 AM, pedro castro <span dir="ltr"><<a href="mailto:pedro_castro@live.com">pedro_castro@live.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex;">
<div><div dir="ltr">
Yes,<br>
<br>
But in the udp connection appears the syslog IP not the original device IP.<br> <br>
<div>
<hr>
Date: Tue, 27 Sep 2011 09:02:25 -0400<br>From: <a href="mailto:cdukes@gmail.com" target="_blank">cdukes@gmail.com</a><br>To: <a href="mailto:syslog-ng@lists.balabit.hu" target="_blank">syslog-ng@lists.balabit.hu</a><br>Subject: Re: [syslog-ng] Spoof-source option on Cygwin<div>
<div></div><div class="h5"><br><br>If you are sending logs to another syslog-ng receiver, you can just use the keep_hostnames(yes) flag.
<div><br clear="all">______________________________________________________________ <br><br>Clayton Dukes<br>______________________________________________________________<br><br><br>
<div>On Tue, Sep 27, 2011 at 7:45 AM, pedro castro <span dir="ltr"><<a href="mailto:pedro_castro@live.com" target="_blank">pedro_castro@live.com</a>></span> wrote:<br>
<blockquote style="border-left:#ccc 1px solid;padding-left:1ex">
<div>
<div dir="ltr">Hi we have Windows 2003 and Windows 2008 with cygwin.<br> <br>We receive events from several devices on syslog-ng server and redirect them to other systems.<br>I want to use spoof-source option but i see that i need to compile syslog-ng from source.<br>
<br>I have tried it but it fails in make.<br> <br>Does anyone have any idea?<br> <br> <br>Regards<br></div></div><br>______________________________________________________________________________<br>Member info: <a href="https://lists.balabit.hu/mailman/listinfo/syslog-ng" target="_blank">https://lists.balabit.hu/mailman/listinfo/syslog-ng</a><br>
Documentation: <a href="http://www.balabit.com/support/documentation/?product=syslog-ng" target="_blank">http://www.balabit.com/support/documentation/?product=syslog-ng</a><br>FAQ: <a href="http://www.balabit.com/wiki/syslog-ng-faq" target="_blank">http://www.balabit.com/wiki/syslog-ng-faq</a><br>
<br><br></blockquote></div><br></div><br></div></div>______________________________________________________________________________ Member info: <a href="https://lists.balabit.hu/mailman/listinfo/syslog-ng" target="_blank">https://lists.balabit.hu/mailman/listinfo/syslog-ng</a> Documentation: <a href="http://www.balabit.com/support/documentation/?product=syslog-ng" target="_blank">http://www.balabit.com/support/documentation/?product=syslog-ng</a> FAQ: <a href="http://www.balabit.com/wiki/syslog-ng-faq" target="_blank">http://www.balabit.com/wiki/syslog-ng-faq</a></div>
</div></div>
</blockquote></div><br></div>