Remote Logging (Client Side)

robeb · 10-12-2002, 05:15 PM

I have my router setup as a remote logging client. I would like to funnel those log's into a single file in my /var/log on my logging server. I've been unable to find anything in past threads on over the Internet. Has anyone had experience with this?

- robeb

Flibble · 10-13-2002, 03:17 AM

Syslog is what you are looking for. Make sure syslogd is running and is configured (/etc/syslog.conf), and that your ipfilter/chains are not set to block. Point your router at your machine as its logging host and away you go.

The following links might help a little:

http://www.cert.org/security-improve...s/i041.08.html
http://www.opensystems.com/support/d...sco_router.htm

Flibble

robeb · 10-13-2002, 12:56 PM

Thanks for the links, Flibble. Apparently, there is no way to differentiate between local logs and remote logs.

Flibble · 10-13-2002, 03:23 PM

Ah! Now I see what you are trying to do.

Check out syslog-ng

http://www.balabit.hu/en/downloads/syslog-ng/

might be more what you are looking for.

Flibble