Page 1 of 1
Listening syslog in two nics (eth0-eth1) in the same server
Posted: Wed Jan 25, 2017 4:35 pm
by juanmafer
Hi!
I have two NICs with a different IP.
I need to listening the 514 port for both adapters and only listening the eth0.
It's posible?
My filter input is:
syslog {
type => 'syslog'
port => 514
host => '0.0.0.0'
}
Thks!
Re: Listening syslog in two nics (eth0-eth1) in the same ser
Posted: Wed Jan 25, 2017 4:57 pm
by mcapra
That should work, but if it doesn't you could configure two separate syslog inputs for each address:
Code: Select all
syslog {
type => 'syslog'
port => 514
host => '192.168.67.1'
}
syslog {
type => 'syslog'
port => 514
host => '192.168.67.2'
}
There's also additional considerations when listening on privileged ports like 514. I would suggest reviewing this document:
https://assets.nagios.com/downloads/nag ... Server.pdf
Re: Listening syslog in two nics (eth0-eth1) in the same ser
Posted: Wed Jan 25, 2017 5:16 pm
by juanmafer
Thaks for the quickly answer.
I made the modifications but the problem continue.
Another idea?
Re: Listening syslog in two nics (eth0-eth1) in the same ser
Posted: Wed Jan 25, 2017 5:54 pm
by mcapra
You haven't described what the problem is yet. Could you tell me exactly what's going on?
Re: Listening syslog in two nics (eth0-eth1) in the same ser
Posted: Wed Jan 25, 2017 6:09 pm
by juanmafer
I fixed the issue!!!!
We solved it by disabling the Reverse Path Forwarding in the file /etc/sysctl.conf, this was done setting to zero (0) the line
# Controls source route verification
net.ipv4.conf.default.rp_filter = 0
Re: Listening syslog in two nics (eth0-eth1) in the same ser
Posted: Thu Jan 26, 2017 10:22 am
by dwhitfield
It sounds like this issue has been resolved. Is it okay if we lock this thread? Thanks for choosing the Nagios forums!