[syslog-ng]Solaris 8 Syslog-ng not logging

[Ratliff, Lonnie]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Greetings,

I'm in the process of replacing the native syslog daemon on my
Solaris 8 loghost, however syslog-ng doesn't log anything except
local messages.  I've searched back through the archives and have
found alittle help, however its still not working.  Any assistance
would be greatly appreciated.

Here is my system and configuration.

Sun V880
Solaris 8
syslog-ng version 1.6.0rc1

No errors noted during compiling and I verified it did come back with
Sun Streams and door support.

I've carved my config file down to the following, just to get
something.  I've even tried the default filter and all it logged was
Syslog-ng was starting.

options { sync(0);
	use_dns(no);
	use_fqdn(no);
	 };

source local { sun-streams("/dev/log" door("/etc/.syslog_door"));
internal(); };

filter f_host { host("10.0.0.1"); };

destination pix01 { file("/syslog/firewalls/pix01"); };

log { source(local); filter(f_host); destination(pix01); };

I've verified through tcpdump that the remote system (Cisco Pix) is
actually sending me messages.  What am I missing or screwing up??



Thank You
Lonnie Ratliff
lratliff@tmh.tmc.edu



-----BEGIN PGP SIGNATURE-----
Version: PGPfreeware 6.5.8 for non-commercial use <http://www.pgp.com>

iQA/AwUBPlzlFMflBxQ642uCEQI5mwCgvuR/BYzlVq5xuWYlZ7lacnH9wrAAoK3A
tx25MqZCYAuKYV/U1tKSzfbG
=ks+m
-----END PGP SIGNATURE-----

-----------------------------------------
____________________________________________________________________________________
****CONFIDENTIALITY NOTICE****
This e-mail is the property of The Methodist Hospital and/or its relevant affiliates and may contain confidential and privileged material for the sole use of the intended recipient(s). Any review, use, distribution or disclosure by others is strictly prohibited. If you are not the intended recipient(or authorized to receive for the recipient), please contact the sender or reply to The Methodist Hospital at datasecurity@tmh.tmc.edu and delete all copies of the message.  Thank you.