[syslog-ng]Re: iptables/netfilter and syslog-ng

For syslog-ng to receive kernel logs, you need to either add a source for /proc/kmsg, or (better) run klogd. (it's almost written in the documentation..) klogd is better because it translates the kernel logs using System.map. The trick, on my debian, is that installing the package syslog-ng removes sysklogd, which contained both the old syslog and klogd, so I simply copied by hand the klogd daemon in /usr/local/sbin.. hth -- Sam