[syslog-ng]I can't force syslog-ng works with multihomed PC
Balazs Scheidler
syslog-ng@lists.balabit.hu
Tue, 13 May 2003 16:10:43 +0200
On Tue, May 13, 2003 at 10:47:46AM +0300, Alexander Chernyh wrote:
> Hello
>
> I need that syslog-ng listen internal and external interface of my
> log-server
> See part of my syslog-ng.conf
> #more syslog-ng.conf
> options {
> use_time_recvd(yes);
> use_dns(yes);
> keep_hostname(no);
> long_hostnames(off);
> sync(0);
> };
> source src {
> unix-dgram("/var/run/log");
> internal();
> file("/dev/klog");
> udp(ip(0.0.0.0) port(514));
> };
>
>
> #/usr/local/etc/rc.d/syslog-ng.sh start
>
> #sockstat -4 | grep syslog-ng
> root syslog-n 59796 6 udp4 *:514 *:*
> root syslog-n 59796 9 ? ? ?
> #sockstat -4 | grep syslog-ng
> root syslog-n 59796 6 udp4 *:514 *:*
> root syslog-n 59796 9 udp4 *:1445 *:*
> #sockstat -4 | grep syslog-ng
> root syslog-n 59796 6 udp4 *:514 *:*
> root syslog-n 59796 9 udp4 *:1448 *:*
> #sockstat -4 | grep syslog-ng
> root syslog-n 59796 6 udp4 *:514 *:*
> root syslog-n 59796 9 udp4 *:1449 *:*
>
> syslog-ng listen on 514 port for all interfaces (multihomed PC with internal
> and external interface),
> but why does syslog-ng dynamicaly listen other ports, not typed in
> syslog-ng.conf file???
> It is too bad because logs from other hosts partially lost.
> If syslog-ng listen on internat interface only - all works OK.
maybe for sending messages to other syslog hosts?
--
Bazsi
PGP info: KeyID 9AF8D0A9 Fingerprint CD27 CFB0 802C 0944 9CFD 804E C82C 8EB1