On Mon, Sep 17, 2001 at 01:44:14PM -0700, Ken Paris wrote:
source s_local { sun-streams("/dev/log" door("/etc/.syslog_door")); }; source s_int { internal(); }; source s_net_udp { udp(); }; destination d_local { file("/var/log/default"); }; destination d_int { file("/var/log/internal"); }; log { source(s_local); source(s_net_udp); destination(d_local); }; log { source(s_int); destination(d_int); };
I could be crazy, or need to look at documentation, but I think udp() needs a port number. source s_net_udp { udp(port(514)); }; might work better for you. This is the only real difference I see between my config and yours (asside from cosmetic). A deeper analysis would require thought, and looking at the truss output, and it is too late for either things. ---------------------------------------------------------------------------- __o Bradley Arlt Email: arlt@cpsc.ucalgary.ca o__ _ \<_ WWW: www.acs.ucalgary.ca/~bdarlt _>/ _ (_)/(_) -Eat well, sleep peacefully, drink lots, and ride like hell. (_)\(_)