On 4/21/06, Jim Schuyler <sky@red7.com> wrote:
Although I have tried to convince my client that this isn¹t exactly the best idea, they want to configure syslog-ng to send logs by broadcast rather than to a specific address on their subnet.
IMHO, it's not always a _bad_ idea, if you really know why you're doing it.
(I have tried using 192.168.1.255 and 255.255.255.255 and neither seems to do it, although I might not be properly configured on the other end to receive broadcasts...the other end is Mac OSX and it does receive messages just fine if I configure 192.168.1.14, as above.)
What's the netmask of the interface on the host receiving these logs? Does 'netstat -nap udp' on the recieving host show *.514 as the listener? Is the sender on the same subnet as the receiving host? If not, does the router serving the receiver have "no ip directed-broadcast" or the equivalent setting? Kevin