Koozali.org: home of the SME Server

Legacy Forums => Experienced User Forum => Topic started by: Patrick Basile on January 14, 2002, 11:32:11 PM

Title: send/store Cisco router logs on SME?
Post by: Patrick Basile on January 14, 2002, 11:32:11 PM

Hey everybody,

I'd like to send the router log from a Cisco 1720 to the SME V5 server and then store it for later viewing if needed.  Has anyone done this?  If so, how?  Is there a special application that I need to run on SME in order to allow the router to send the logs and store them?  Thanks.

Regards,
Patrick

Title: Re: send/store Cisco router logs on SME?
Post by: Filippo Carletti on January 15, 2002, 11:19:30 PM

Logging to syslog from a cisco ?
Start syslogd with remote log (-r option) but check that e-smith ipchains let packets pass (port 514 udp)
On the cisco:
logging ip.of.your.server

Title: Re: send/store Cisco router logs on SME?
Post by: Patrick Basile on January 16, 2002, 05:36:21 AM

Filippo,

Hey...long time no talk.  How are you?  Last I heard you were going to do some work on a new version of SARG...anything come of that?

As far as this - yes, I'm trying to place/store Cisco router logs on my SME server.  Forgive this newbie question, but is syslog already installed on SME by default?  Could you provide more specific details on the syslogd command?  I might need some help checking the IP chains rules, and then modifying them.

Thanks for your response - I appreciate it.

Regards,
Patrick

Title: Re: send/store Cisco router logs on SME?
Post by: Filippo Carletti on January 16, 2002, 09:19:00 PM

sarg is on the way.

syslog is enabled but doesn't accept mesages from network
Modify /etc/rc.d/init.d/syslog line 27 add -r to the options
If port 514/upd is open ti should work.
Let us know.

Title: Re: send/store Cisco router logs on SME?
Post by: Patrick Basile on January 16, 2002, 11:20:32 PM

Filippo,

Which of the lines below do I modify?

#---------------------------------------------------------------------------
# e-smith mod - listen to /dev/log socket in DNS chroot() jail
#       daemon syslogd -m 0
        daemon syslogd -m 0 -a /home/dns/dev/log
# e-smith mod end
#---------------------------------------------------------------------------

Thanks.

Patrick

Title: Re: send/store Cisco router logs on SME?
Post by: Filippo Carletti on January 17, 2002, 04:16:26 PM

> Which of the lines below do I modify?
>         daemon syslogd -m 0 -a /home/dns/dev/log

Add -r before -m

I'm nearly sure you'll find port 514 filtered.