[syslog-ng] Configuring syslog-ng to broadcast

[Kevin]

On 4/21/06, Jim Schuyler <sky at red7.com> wrote:
> Although I have tried to convince my client that this isn¹t exactly the best
> idea, they want to configure syslog-ng to send logs by broadcast rather than
> to a specific address on their subnet.

IMHO, it's not always a _bad_ idea, if you really know why you're doing it.

> (I have tried using 192.168.1.255 and 255.255.255.255 and neither seems to
> do it, although I might not be properly configured on the other end to
> receive broadcasts...the other end is Mac OSX and it does receive messages
> just fine if I configure 192.168.1.14, as above.)

What's the netmask of the interface on the host receiving these logs?

Does 'netstat -nap udp' on the recieving host show *.514 as the listener?

Is the sender on the same subnet as the receiving host?  If not, does
the router serving the receiver have "no ip directed-broadcast" or the
equivalent setting?

Kevin