Hi, I am in a strange problem.
I am able to send an application name *"snort"* logs to rSyslog server. In this case, I am getting error that *wireshark is perfectly catching the logs of snort but rSyslog is not logging the same.* Here is output of my commands please have a look I am using *CentOS for snort machine* and *Ubuntu for rsyslog server.* [1] For nc and telnet, This is the successful output of telnet and nc http://fpaste.org/45010/ the resulting messages are appearing in syslog of log server. [2] For netstat command, This are the results of netstat particularly on 514 port http://fpaste.org/45016/ where *[root@clc]* is *snort machine* and *[root@logserver]* is the *log server machine*. I have also disabled firewalls on both machines; so *port blocking* is also not possible. Where is actual problem I am unable to get? Seeking for guidance, Thanks ! -- *Cheers, Mayur*. _______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com/professional-services/ What's up with rsyslog? Follow https://twitter.com/rgerhards NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE THAT.
