[syslog-ng] (no subject)

[Geller, Sandor (IT)]

Hello, 

> -----Original Message-----
> From: syslog-ng-bounces at lists.balabit.hu 
> [mailto:syslog-ng-bounces at lists.balabit.hu] On Behalf Of hi ro
> Sent: Thursday, September 27, 2007 10:48 AM
> To: syslog-ng at lists.balabit.hu
> Subject: [syslog-ng] (no subject)
> 
> Hi,
>  
> I have a client node and a server node which has two Network 
> Interface Card(NIC A, NIC B).
>  
> Syslog message sender is installed in the client node.
> Syslog-ng(version2.0.5) and eventlog(version0.2.5) are 
> installed in the server node.
>  
> I can't understand following situation.
>  
> [situation]
> 1. Change status NIC A and B UP by ifup command
> 2. Start syslog-ng service
> 3. Change status NIC A DOWN by ifdown command
> 4. Syslog-ng service can receive message to NIC A. ※ situation
> (Syslog-ng service can also receive message to NIC B.)
> 5. Change status NIC B DOWN by ifdown command
> 6. Syslog-ng service can't receive message to NIC A and B. 
>  
> Under the situation(4), I expected that syslog-ng service 
> can't receive message to NIC A and can receive message to NIC B.
>  
> The OS of the server node is Red Hat Enterprice Linux 
> Version4 update4 x86.

This has nothing to do with syslog-ng. Underlinux the system has
the IP addresses, not the interfaces. For more information see the
kernel documentation about the IP sysctls, look for arp_filter and
arp_ignore

Regards,

Sandor
--------------------------------------------------------

NOTICE: If received in error, please destroy and notify sender. Sender does not intend to waive confidentiality or privilege. Use of this email is prohibited when received in error.