[ednog] DNS server monitoring
booloo at ucsc.edu
Mon Nov 28 20:11:34 EST 2005
> > servers deal with the syslog server going down for an extended period
> > of time. I don't think that should be a problem because they're just
> > throwing udp at the server...
> Correct, once the DNS server puts the logs on the wire, they don't
> care about what happens to them.
The one caveat to this is that dedicated syslog servers that don't run
any traffic-generating applications end up having their MAC address aged
out of the forwarding tables of the L2 gear, and your syslog traffic ends
up flooded to everyone in the same broadcast domain.
More information about the ednog