[ale] sylogd not playing nice

[Chris Fowler]

I'm going to let you guys in on a little secret.  strace
is a very nice tool.  If syslogd is running at pid 54, connect to
it using 'strace -p 54'.  You'll see what system calls are
being excuted and how syslogd is dealing with the messages.
You'll even see if it is trying to write() them or read() from the
network.  I use this tool almost every day to fix problems.

Chris


-----Original Message-----
From: Ned Williams [mailto:nwilliams at interland.com]
To: ale at ale.org
Sent: Thursday, March 28, 2002 1:59 PM
To: Christopher Bergeron
Cc: ale at ale.org
Subject: RE: [ale] sylogd not playing nice


Nothing is firewalled, traroute -p 514 gets to the syslog server, events
from other devices get to the syslog server, tcpdump shows the connection
from the syslog client node to the syslog server node, but the events dont
get to /var/log/messages and before anyone ask no other logs are setup
except var/log/mail

Ned


On Tue, 26 Mar 2002, Christopher Bergeron wrote:

> have you firewalled anything?  what distro is it?  if you're using Redhat
or
> something, you have to edit /etc/sysconfig/syslog and put the "-r" flag in
> there.  editing the /etc/init.d/syslogd file won't work (not sure why).
>
> -CB
>
> > -----Original Message-----
> > From: Ned Williams [mailto:nwilliams at interland.com]
> > Sent: Tuesday, March 26, 2002 4:14 PM
> > To: John C
> > Cc: ale at ale.org
> > Subject: RE: [ale] sylogd not playing nice
> >
> >
> > Already done this is the main syslog server I set up 2 years ago.
> >
> > Ned
> >
> >
> > On Tue, 26 Mar 2002, John C wrote:
> >
> > > You need to launch syslog on the "server" with the -r option to
> > allow it to
> > > accept remote connections.  Without the -r option it will not
> > allow other
> > > servers to inject logs into it.
> > >
> > >
> > >
> > > John
> > >
> > > -----Original Message-----
> > > From: Ned Williams [mailto:nwilliams at interland.com]
> > > Sent: Tuesday, March 26, 2002 3:45 PM
> > > To: ale at ale.org
> > > Subject: [ale] sylogd not playing nice
> > >
> > >
> > >
> > > Hey gang for some reason I cannot get syslog to send to a remote
syslog
> > > server, this seems like a brain dead operation
> > > I added the line
> > >
> > > *.info;mail.none;authpriv.none;cron.none                 @x.x.x.x
> > >
> > > where my IP of the syslog server is x.x.x.x
> > >
> > > yet no matter what I inject with logger I get nothing on the
> > remote syslog
> > > server(which Iknow is working just fine)
> > >
> > > Help
> > > Ned
> > >
> > >
> > >
> > > ---
> > > This message has been sent through the ALE general discussion list.
> > > See http://www.ale.org/mailing-lists.shtml for more info.
> > Problems should be
> > > sent to listmaster at ale dot org.
> > >
> > >
> >
> >
> > ---
> > This message has been sent through the ALE general discussion list.
> > See http://www.ale.org/mailing-lists.shtml for more info.
> > Problems should be
> > sent to listmaster at ale dot org.
> >
>


---
This message has been sent through the ALE general discussion list.
See http://www.ale.org/mailing-lists.shtml for more info. Problems should be
sent to listmaster at ale dot org.




---
This message has been sent through the ALE general discussion list.
See http://www.ale.org/mailing-lists.shtml for more info. Problems should be 
sent to listmaster at ale dot org.