From owner-freebsd-questions@FreeBSD.ORG  Mon Nov 28 23:51:04 2011
Return-Path: <owner-freebsd-questions@FreeBSD.ORG>
Delivered-To: freebsd-questions@freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34])
	by hub.freebsd.org (Postfix) with ESMTP id 557BA106566B
	for <freebsd-questions@freebsd.org>;
	Mon, 28 Nov 2011 23:51:04 +0000 (UTC) (envelope-from jon@radel.com)
Received: from wave.radel.com (wave.radel.com [216.143.151.4])
	by mx1.freebsd.org (Postfix) with ESMTP id 12E738FC1C
	for <freebsd-questions@freebsd.org>;
	Mon, 28 Nov 2011 23:51:03 +0000 (UTC)
Received: by wave.radel.com (CommuniGate Pro PIPE 4.1.6)
	with PIPE id 10449154; Mon, 28 Nov 2011 18:51:03 -0500
Received: from [192.168.43.232] (account jon@radel.com HELO gravenstein.local)
	by wave.radel.com (CommuniGate Pro SMTP 4.1.6)
	with ESMTP-TLS id 10449152; Mon, 28 Nov 2011 18:50:44 -0500
Message-ID: <4ED41E53.6000403@radel.com>
Date: Mon, 28 Nov 2011 18:50:43 -0500
From: Jon Radel <jon@radel.com>
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.6;
	rv:8.0) Gecko/20111105 Thunderbird/8.0
MIME-Version: 1.0
To: Kaya Saman <kayasaman@gmail.com>
References: <4ED38578.1000501@gmail.com>
	<CA+tpaK0rkWX8G3hiapZkutK6xvb+c0z6aTK=U=RsC=Pk68mCEA@mail.gmail.com>
	<4ED3CE66.4020903@gmail.com> <4ED3D9BF.701@my.gd>
	<4ED41C5F.3030906@gmail.com>
In-Reply-To: <4ED41C5F.3030906@gmail.com>
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 8bit
X-Radel.com-MailScanner-Information: Please contact Jon for more information
X-Radel.com-MailScanner: Found to be clean
X-Mailer: CommuniGate Pro CLI mailer
Cc: freebsd-questions@freebsd.org
Subject: Re: Alternative to syslogd that actually writes external logs to
 files?
X-BeenThere: freebsd-questions@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: User questions <freebsd-questions.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
	<mailto:freebsd-questions-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-questions>
List-Post: <mailto:freebsd-questions@freebsd.org>
List-Help: <mailto:freebsd-questions-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
	<mailto:freebsd-questions-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Mon, 28 Nov 2011 23:51:04 -0000


On 11/28/11 6:42 PM, Kaya Saman wrote:

>
> However, when using tcpdump it shows that rsyslog is infact receiving
> information but still unfortunately not logging to file???
>
>
> # tcpdump -tlnvv -i em0 port 514
> tcpdump: listening on em0, link-type EN10MB (Ethernet), capture size 96
> bytes
> IP (tos 0x0, ttl 255, id 1875, offset 0, flags [none], proto UDP (17),
> length 142)
> 192.168.1.1.59189 > 192.168.1.120.514: SYSLOG, length: 114
> Facility local7 (23), Severity notice (5)
> Msg: 11578: 011565: Nov 28 23:34:19.475: %SYS-5-CONFIG[|syslog]
>
>
>
> File permissions are correct as I got rsyslog to create the file from
> scratch.......
>
> What am I missing here?

Have you tried with all firewalling on the machine turned off?

[My apologies if this has been covered earlier in the thread and I 
missed it.]

--Jon Radel
jon@radel.com