Netscreen 50 and RedHat Linux Syslog problem

Aug 05, 2005 2 Replies

Hi Experts,


Have anyone ever tried that sending all logs from Netscreen 50 to a RedHat Linux syslogd ?


My Linux Syslogd can receive the logs from my Cisco LAN switches, but can't receive any logs from my Netscreen 50.


I've already configure my Netscreen 50 to send "Events" and "Traffic" logs to my Linux host with UDP port 514. Both "Security Facility" and "Facility" are set into "LOCAL0". I've confirmed that my Linux is listening to this port.


In LINUX "/etc/syslog.conf", I've this entry: local0.* /var/log/netscreen.log


May some experts give me suggestions ? Million thanks !!!


Can you run a tcpdump on the syslog server to see if the firewall is even attempting to connect?

HI Rahmant,

Thanks v. much for your advice. It points out the problem. The syslog traffic is blocked by the 1st tier firewall. Now is ok ! Thanks !! :)

Join the Discussion

Have something to add? Share your thoughts — no account required.

Didn't find your answer?

Ask the community — no account required