[syslog-ng]FW: Filtering host IP addresses

[Chris Vaughan]

This is a multi-part message in MIME format.

------_=_NextPart_001_01C4B27B.15303184
Content-Type: text/plain; charset="US-ASCII"
Content-Transfer-Encoding: quoted-printable

I figured this out, creating an extra filter for these hosts, using
boolean expressions and variables.

-----Original Message-----
From: Chris Vaughan=20
Sent: Friday, 15 October 2004 3:15 PM
To: 'syslog-ng@lists.balabit.hu'
Subject: Filtering host IP addresses


Greetings,

I have recently set up syslog-ng on a host to record logs from the cisco
switches deployed around the office I work in. I have set the switches
to be filtered by IP address, which has created a problem.

One pod of switches in a low numbered vlan has management addresses,
10.x.xxx.11 to 14. I have found that the log files for these switches
are being tainted by logs from switches with addresses ending with such
octets as 121, in the log for switch 10.x.xxx.12 or 143 in the log for
switch 10.x.xxx.14.=20

How do I stop events from the switches with the three digit end octets
entering data into the logs for these four switches, .11 to .14?

=20


***************************************************************
This message is intended for the addressee named and=20
may  contain confidential information. If you are not the=20
intended recipient, please delete it and notify the sender.=20
Views expressed in this message are those of the=20
individual sender, and are not necessarily the views of=20
the Department of  Lands.

This email message has been swept by MIMEsweeper=20
for the presence of computer viruses.
***************************************************************


------_=_NextPart_001_01C4B27B.15303184
Content-Type: text/x-vcard; 
    name="Chris Vaughan (Chris.Vaughan@lands.nsw.gov.au).vcf"
Content-Transfer-Encoding: base64
Content-Description: Chris Vaughan (Chris.Vaughan@lands.nsw.gov.au).vcf
Content-Disposition: attachment; 
    filename="Chris Vaughan (Chris.Vaughan@lands.nsw.gov.au).vcf"
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------_=_NextPart_001_01C4B27B.15303184--