[syslog-ng] ng-syslog logging in a stealth mode

[Jens Grigel]

On Tue, 2005-09-13 at 15:06, Albretch Mueller wrote:
> Hi *,
> 
> I would like for system logs like the ones produced by the kernel, iptable 
> (generally in /var/log/syslog), as well as anyother applications running in 
> a Linux-based router to be processed by an ng-syslog client and just popped 
> as UDP packets
> 
> I looked into http://www.campin.net/syslog-ng/faq.html and couldn't see any 
> particular info on this specifically and I also search 
> http://marc.theaimsgroup.com/?l=syslog-ng for 'stealth' and didn't get any 
> hits (a search on 'UDP' would dump millions of hits on you ;-))
> 
> How could you do something like that?
> 

For the kernel messages you could use the netconsole kernel module to 
send any kernel messages directly via udp to a specified client as soon
as the network is available, no need for running a local syslogd/klogd.

Check kernel/Documentation/networking/Netconsole.txt for details.

Jens

> Thanks
> Albretch
> 
> 
> _______________________________________________
> syslog-ng maillist  -  syslog-ng at lists.balabit.hu
> https://lists.balabit.hu/mailman/listinfo/syslog-ng
> Frequently asked questions at http://www.campin.net/syslog-ng/faq.html