syslogd reporting ip address when reporting remotely

syslogd reporting ip address when reporting remotely

Post by Kevi » Thu, 30 Aug 2001 18:28:36



Hello, I'm setting up my machines to dump all the syslogd entries to a
central server.  It's working okay, but the remotely logged entries
are all prefaced with the ip address of the machine it comes from.
I'd prefer it to resolve that to the machine's hostname.  Is there
something wrong with my DNS/NIS or, in other words can I/how can I fix
this?

cheers,
Kevin

 
 
 

syslogd reporting ip address when reporting remotely

Post by those who know me have no need of my nam » Fri, 31 Aug 2001 05:04:36



Quote:>Hello, I'm setting up my machines to dump all the syslogd entries to a
>central server.  It's working okay, but the remotely logged entries
>are all prefaced with the ip address of the machine it comes from.
>I'd prefer it to resolve that to the machine's hostname.  Is there
>something wrong with my DNS/NIS or, in other words can I/how can I fix
>this?

yes and yes -- usually.  some syslogd's like to log ip addresses so that
you aren't spoofed by someone with control of their in-addr space.

--
okay, have a sig then

 
 
 

1. Ifconfig reports two IP addresses for tun0?

i'm using FreeBSD 4.3-RELEASE. i have a pppoe connection.

ifconfig reports:
tun0: flags=8051<UP,POINTOPOINT,RUNNING,MULTICAST> mtu 1492
        inet6 fe80::260:8ff:feb0:9236%tun0 --> :: prefixlen 64 scopeid 0xb
        inet 66.20.89.68 --> 66.20.89.1 netmask 0xff000000
        inet 66.20.93.146 --> 66.20.93.1 netmask 0xff000000
        Opened by PID 156

however, /var/log/ppp.log reports:
Aug  6 08:57:31 maynardferguson ppp[156]: tun0: Phase: Received NGM_PPPOE_CLOSE (hook "tun0")
Aug  6 08:57:31 maynardferguson ppp[156]: tun0: Phase: deflink: Device disconnected
Aug  6 08:57:31 maynardferguson ppp[156]: tun0: Phase: deflink: open -> lcp
Aug  6 08:57:31 maynardferguson ppp[156]: tun0: Phase: bundle: Terminate
Aug  6 08:57:31 maynardferguson ppp[156]: tun0: Phase: deflink: Disconnected!
Aug  6 08:57:32 maynardferguson ppp[156]: tun0: Phase: deflink: lcp -> logout
Aug  6 08:57:32 maynardferguson ppp[156]: tun0: Phase: deflink: Disconnected!
Aug  6 08:57:32 maynardferguson ppp[156]: tun0: Phase: deflink: logout -> hangup
Aug  6 08:57:32 maynardferguson ppp[156]: tun0: Phase: deflink: Connect time: 551159 secs: 1022228004 octets in, 1069003933 octets out
Aug  6 08:57:32 maynardferguson ppp[156]: tun0: Phase: deflink: : 1649609 packets in, 1632527 packets out
Aug  6 08:57:32 maynardferguson ppp[156]: tun0: Phase:  total 3794 bytes/sec, peak 368767 bytes/sec on Mon Aug  6 08:57:32 2001

is there any way to make ppp remove the previous IP address (66.20.89.68)
 from the ifconfig table? (or at least put the new IP address before the old?)

tia

2. append date to output of a cronjob file

3. Apache logs only reports IP address

4. The coming legal storm

5. Dynamic IP address (reporting) ???

6. HP4m on SS10 serial port , or SOL2.3 client for SGI print server

7. reporting ip-address via email

8. join utility problem

9. ifconfig tun0 reports two IP Addresses

10. /etc/hosts and ifconfig reports different IP address

11. Database Reporting Tool e.g. Crystal Report

12. Java Report Engine for Seagate Crystal Reports (Server Runtime)

13. Bug report bounced + bug report