[syslog-ng]I can't force syslog-ng works with multihomed PC

Balazs Scheidler syslog-ng@lists.balabit.hu
Tue, 13 May 2003 16:10:43 +0200


On Tue, May 13, 2003 at 10:47:46AM +0300, Alexander Chernyh wrote:
> Hello
> 
> I need that syslog-ng listen internal and external interface of my
> log-server
> See  part of my syslog-ng.conf
> #more syslog-ng.conf
> options {
>         use_time_recvd(yes);
>         use_dns(yes);
>         keep_hostname(no);
>         long_hostnames(off);
>         sync(0);
> };
> source src {
>         unix-dgram("/var/run/log");
>         internal();
>         file("/dev/klog");
>         udp(ip(0.0.0.0) port(514));
> };
> 
> 
> #/usr/local/etc/rc.d/syslog-ng.sh start
> 
> #sockstat  -4 | grep syslog-ng
> root     syslog-n 59796    6 udp4   *:514                 *:*
> root     syslog-n 59796    9 ?      ?                     ?
> #sockstat  -4 | grep syslog-ng
> root     syslog-n 59796    6 udp4   *:514                 *:*
> root     syslog-n 59796    9 udp4   *:1445                *:*
> #sockstat  -4 | grep syslog-ng
> root     syslog-n 59796    6 udp4   *:514                 *:*
> root     syslog-n 59796    9 udp4   *:1448                *:*
> #sockstat  -4 | grep syslog-ng
> root     syslog-n 59796    6 udp4   *:514                 *:*
> root     syslog-n 59796    9 udp4   *:1449                *:*
> 
> syslog-ng listen on 514 port for all interfaces (multihomed PC with internal
> and external interface),
> but why does syslog-ng dynamicaly listen other ports, not typed in
> syslog-ng.conf file???
> It is too bad because logs from other hosts partially lost.
> If syslog-ng listen on internat interface only - all works OK.

maybe for sending messages to other syslog hosts?

-- 
Bazsi
PGP info: KeyID 9AF8D0A9 Fingerprint CD27 CFB0 802C 0944 9CFD 804E C82C 8EB1