From owner-freebsd-questions@FreeBSD.ORG Sat Apr 10 17:42:33 2010 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 3ECFE106564A for ; Sat, 10 Apr 2010 17:42:33 +0000 (UTC) (envelope-from peter@boosten.org) Received: from smtpq3.tb.mail.iss.as9143.net (smtpq3.tb.mail.iss.as9143.net [212.54.42.166]) by mx1.freebsd.org (Postfix) with ESMTP id C6E8E8FC18 for ; Sat, 10 Apr 2010 17:42:32 +0000 (UTC) Received: from [212.54.42.143] (helo=smtp12.tb.mail.iss.as9143.net) by smtpq3.tb.mail.iss.as9143.net with esmtp (Exim 4.69) (envelope-from ) id 1O0ehT-0004UB-77 for freebsd-questions@freebsd.org; Sat, 10 Apr 2010 19:42:31 +0200 Received: from [84.25.72.219] (helo=ra.egypt.nl) by smtp12.tb.mail.iss.as9143.net with esmtp (Exim 4.69) (envelope-from ) id 1O0ehQ-0001lu-4L for freebsd-questions@freebsd.org; Sat, 10 Apr 2010 19:42:28 +0200 Received: from [127.0.0.1] (xp.egypt.nl [192.168.13.35]) by ra.egypt.nl (Postfix) with ESMTP id 9C8353983C for ; Sat, 10 Apr 2010 19:42:27 +0200 (CEST) Message-ID: <4BC0B883.2090403@boosten.org> Date: Sat, 10 Apr 2010 19:42:27 +0200 From: Peter Boosten User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.1.9) Gecko/20100317 Thunderbird/3.0.4 MIME-Version: 1.0 To: freebsd-questions@freebsd.org References: <4BC0AD32.1030605@locolomo.org> In-Reply-To: <4BC0AD32.1030605@locolomo.org> X-Enigmail-Version: 1.0.1 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit X-ZiggoSMTP-MailScanner-Information: Please contact the ISP for more information X-ZiggoSMTP-MailScanner-ID: 1O0ehQ-0001lu-4L X-ZiggoSMTP-MailScanner: Found to be clean X-ZiggoSMTP-MailScanner-SpamCheck: geen spam, SpamAssassin (niet cached, score=-0.241, vereist 5, BAYES_20 -0.74, CM_META_TB_NOARR 0.50, SPF_PASS -0.00) X-ZiggoSMTP-MailScanner-From: peter@boosten.org X-Spam-Status: No Subject: Re: Syslog to log remote nodes X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 10 Apr 2010 17:42:33 -0000 On 10-4-2010 18:54, Erik Norgaard wrote: > Hi: > > I want my syslog to log remote nodes, in particular my access point and > router, which authenticates users against my freeradius server. > > In /etc/rc.conf I've got: > syslogd_flags="-C -a 192.168.0.0/23 -a 172.16.0.0/23 -vv" > > In /etc/syslog.conf I've got first the entries for the system, no > networked clients specified, > > ... > local0.* /var/log/radius.log > ... > # Remote systems > +172.16.0.0/23 > *.info /var/log/wlan.log > +192.168.0.254 > *.info /var/log/router.log > > Surprise, I've got my access point logs in the radius log file, not in > the wlan.log, > > snip radius.log: > > Apr 10 17:54:15 ap airport 80211: Rotated TKIP group key. > Apr 10 18:02:19 ap airport ntp: Clock synchronized to > network time server ntp.locolomo.org (adjusted -1 seconds). > Apr 10 18:43:11 alpha radiusd[79800]: Loaded virtual > server inner-tunnel > Apr 10 18:43:11 alpha radiusd[79800]: Loaded virtual > server > > The "ap" is the access point. > > I haven't got anything in router.log and can't really figure where it > has ended up. > > What's wrong with my syslog.conf? > I tried once the same setup, but never got it working. I ended up switching to syslog-ng (I know, probably not the answer you're looking for, but with syslog-ng you can configure the way you want it to be). Peter -- http://www.boosten.org