From owner-freebsd-questions@FreeBSD.ORG  Sat Apr 10 16:54:14 2010
Return-Path: <owner-freebsd-questions@FreeBSD.ORG>
Delivered-To: freebsd-questions@freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34])
	by hub.freebsd.org (Postfix) with ESMTP id 91A5A1065673
	for <freebsd-questions@freebsd.org>;
	Sat, 10 Apr 2010 16:54:14 +0000 (UTC)
	(envelope-from norgaard@locolomo.org)
Received: from mail.locolomo.org (97.pool85-48-194.static.orange.es
	[85.48.194.97]) by mx1.freebsd.org (Postfix) with ESMTP id 496A98FC14
	for <freebsd-questions@freebsd.org>;
	Sat, 10 Apr 2010 16:54:14 +0000 (UTC)
Received: from beta.local (ppp-88-217-16-114.dynamic.mnet-online.de
	[88.217.16.114])
	by mail.locolomo.org (Postfix) with ESMTPSA id 30FB71C0871
	for <freebsd-questions@freebsd.org>;
	Sat, 10 Apr 2010 18:54:12 +0200 (CEST)
Message-ID: <4BC0AD32.1030605@locolomo.org>
Date: Sat, 10 Apr 2010 18:54:10 +0200
From: Erik Norgaard <norgaard@locolomo.org>
User-Agent: Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10.5; en-US;
	rv:1.9.1.9) Gecko/20100317 Lightning/1.0b1 Thunderbird/3.0.4
MIME-Version: 1.0
To: FreeBSD Mailing List <freebsd-questions@freebsd.org>
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 8bit
Subject: Syslog to log remote nodes
X-BeenThere: freebsd-questions@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: User questions <freebsd-questions.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
	<mailto:freebsd-questions-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-questions>
List-Post: <mailto:freebsd-questions@freebsd.org>
List-Help: <mailto:freebsd-questions-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
	<mailto:freebsd-questions-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Sat, 10 Apr 2010 16:54:14 -0000

Hi:

I want my syslog to log remote nodes, in particular my access point and 
router, which authenticates users against my freeradius server.

In /etc/rc.conf I've got:
syslogd_flags="-C -a 192.168.0.0/23 -a 172.16.0.0/23 -vv"

In /etc/syslog.conf I've got first the entries for the system, no 
networked clients specified,

...
local0.*                                        /var/log/radius.log
...
# Remote systems
+172.16.0.0/23
*.info                                          /var/log/wlan.log
+192.168.0.254
*.info                                          /var/log/router.log

Surprise, I've got my access point logs in the radius log file, not in 
the wlan.log,

snip radius.log:

Apr 10 17:54:15 <local0.notice> ap airport 80211: Rotated TKIP group key.
Apr 10 18:02:19 <local0.notice> ap airport ntp: Clock synchronized to 
network time server ntp.locolomo.org (adjusted -1 seconds).
Apr 10 18:43:11 <local0.info> alpha radiusd[79800]: Loaded virtual 
server inner-tunnel
Apr 10 18:43:11 <local0.info> alpha radiusd[79800]: Loaded virtual 
server <default>

The "ap" is the access point.

I haven't got anything in router.log and can't really figure where it 
has ended up.

What's wrong with my syslog.conf?

Thanks, Erik


-- 
Erik Nørgaard
Ph: +34.666334818/+34.915211157                  http://www.locolomo.org