On Tue, May 13, 2003 at 10:47:46AM +0300, Alexander Chernyh wrote:
Hello
I need that syslog-ng listen internal and external interface of my log-server See part of my syslog-ng.conf #more syslog-ng.conf options { use_time_recvd(yes); use_dns(yes); keep_hostname(no); long_hostnames(off); sync(0); }; source src { unix-dgram("/var/run/log"); internal(); file("/dev/klog"); udp(ip(0.0.0.0) port(514)); };
#/usr/local/etc/rc.d/syslog-ng.sh start
#sockstat -4 | grep syslog-ng root syslog-n 59796 6 udp4 *:514 *:* root syslog-n 59796 9 ? ? ? #sockstat -4 | grep syslog-ng root syslog-n 59796 6 udp4 *:514 *:* root syslog-n 59796 9 udp4 *:1445 *:* #sockstat -4 | grep syslog-ng root syslog-n 59796 6 udp4 *:514 *:* root syslog-n 59796 9 udp4 *:1448 *:* #sockstat -4 | grep syslog-ng root syslog-n 59796 6 udp4 *:514 *:* root syslog-n 59796 9 udp4 *:1449 *:*
syslog-ng listen on 514 port for all interfaces (multihomed PC with internal and external interface), but why does syslog-ng dynamicaly listen other ports, not typed in syslog-ng.conf file??? It is too bad because logs from other hosts partially lost. If syslog-ng listen on internat interface only - all works OK.
maybe for sending messages to other syslog hosts? -- Bazsi PGP info: KeyID 9AF8D0A9 Fingerprint CD27 CFB0 802C 0944 9CFD 804E C82C 8EB1