[syslog-ng]kern messages not trapping correctly?

Aladdin syslog-ng@lists.balabit.hu
Mon, 8 Dec 2003 08:03:07 +0200


Hello dan,

Monday, December 8, 2003, 1:06:45 AM, you wrote:

dedn> in my syslog.conf file. I translated that into syslog-ng, but my firewall
dedn> log has not increased one bit, even when I purposly hit a blocked port 
dedn> from the outside. 

dedn> Here's the syslog-ng.conf file. Perhaps someone can see an issue?


dedn> options { dir_perm(0755); perm(0644); chain_hostnames(no);
dedn>           keep_hostname(yes); };

dedn> source local {
dedn>         unix-stream("/dev/log");
dedn>         udp(ip(0.0.0.0) port(514));
dedn>         internal();
dedn> };

   I think that you must stop klogd daemon and put one more line under
   source section. This line is:

   pipe("/proc/kmsg");

   At least this worked for me.
   
-- 
Best regards,
 Aladdin                            mailto:aladdin@antakalnis.lt