[syslog-ng] cisco tcp syslog weirdness/merkwuerdigkeit

[Matt Zagrabelny]

On Wed, 2007-08-22 at 15:27 -0400, Blurry wrote:
> I am not sure what to expect from tcp dump, but I don't see much that
> matches between the log file and the tcp dump file expect hostnames
> and timestamps.

try this on the syslog-ng host:

# tcpdump -s0 -w /tmp/syslog-ng.dump dst port 514

then attach the dump file in an email.

-- 
Matt Zagrabelny - mzagrabe at d.umn.edu - (218) 726 8844
University of Minnesota Duluth
Information Technology Systems & Services
PGP key 1024D/84E22DA2 2005-11-07
Fingerprint: 78F9 18B3 EF58 56F5 FC85  C5CA 53E7 887F 84E2 2DA2

He is not a fool who gives up what he cannot keep to gain what he cannot
lose.
-Jim Elliot
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part
Url : http://lists.balabit.hu/pipermail/syslog-ng/attachments/20070822/71317e91/attachment.pgp