[c-nsp] Router logs going to dmesg

[Andy Saykao]

Thanks John.

Your suggestion did the trick.

Much appreciated.

Cheers.

Andy 

-----Original Message-----
From: John Kougoulos [mailto:koug at intracom.gr] 
Sent: Monday, 21 September 2009 6:03 PM
To: Andy Saykao
Cc: cisco-nsp at puck.nether.net
Subject: Re: [c-nsp] Router logs going to dmesg

Hello,

somewhere at the start of syslog.conf you will see something like:
*.err                      /dev/sysmsg
*err;kern.debug		   /var/adm/messages

*.alert;kern.err	  operator
etc.

change it to something like:
*.err;local0.none	      /dev/sysmsg
*err;kern.debug;local0.none   /var/adm/messages

etc.

and then pkill -1 syslogd

Regards,
John

On Mon, 21 Sep 2009, Andy Saykao wrote:

> Hi All,
>
> I'm trying to send cisco logs to a syslog server running Solaris 9. 
> It's logging fine except that I'm seeing some logs showing up in
dmesg.
>
> Example of a dmesg outout:
>
> Sep 21 13:44:16 [172.16.9.18.224.173] 3297: Sep 21 13:44:15.981 AEST:
> %LINK-3-UPDOWN: Interface GigabitEthernet0/45, changed state to down 
> Sep 21 13:44:21 [172.16.9.18.224.173] 3298: Sep 21 13:44:20.956 AEST:
> %LINK-3-UPDOWN: Interface GigabitEthernet0/45, changed state to up Sep

> 21 13:48:38 agr1-cr-loopback-0.x.x.x 315047: Sep 21 13:48:37.756
> AEST: %SNMP-3-AUTHFAIL: Authentication failure for SNMP req from host
> 83.143.128.1
>
> I've tried changing the facility to local0.info on the cisco devices 
> but still the same thing is happening. Is there a particular facility 
> I should be using so the logs don't appear in dmesg???
>
> This was the only thing I could find on goggle about my problem but no

> real solution.
>
> http://www.velocityreviews.com/forums/t34315-which-facility-is-best-fo
> r-
> logging-to-linux-syslog.html
>
>
> This is my /etc/syslog.conf file.
>
> # Log cisco routers
> local0.info                                     /var/log/cisco.log
>
>
> And my config on the routers.
>
> logging facility local0
> logging source-interface Loopback0
> logging 210.15.210.x
>
> Thanks.
>
> Andy
>
> This email and any files transmitted with it are confidential and 
> intended solely for the use of the individual or entity to whom they
are addressed.
> Please notify the sender immediately by email if you have received 
> this email by mistake and delete this email from your system. Please 
> note that any views or opinions presented in this email are solely 
> those of the author and do not necessarily represent those of the
organisation.
> Finally, the recipient should check this email and any attachments for

> the presence of viruses. The organisation accepts no liability for any

> damage caused by any virus transmitted by this email.
>
> _______________________________________________
> cisco-nsp mailing list  cisco-nsp at puck.nether.net 
> https://puck.nether.net/mailman/listinfo/cisco-nsp
> archive at http://puck.nether.net/pipermail/cisco-nsp/
>

______________________________________________________________________
This email has been scanned by the MessageLabs Email Security System.
For more information please visit http://www.messagelabs.com/email
______________________________________________________________________