Prev: iPad CRUSHER!!!
Next: What CSMA & CSMS mean
From: JF Mezei on 24 Mar 2010 06:48
Just spent quite a bit of time searching for this.


On a Xserve (10.6 OS-X server), the com.apple.syslogd.plist lacks the
"commented section" that enables listening on port 514 for syslog
messages coming from routers etc.

Lots of web pages mentioned you simply needed to uncomment it. But on my
system, it wasn't there to be uncommented. (perhaps because I used plist
editor forst and perhaps it zaps comments).

Anyways, just for sake of documenting (in case Google re-eneables
searching of newsgroups)

http://www.opensource.apple.com/source/syslog/syslog-69.0.3/syslogd.tproj/com.apple.syslogd.plist


<!--
Un-comment the following lines to enable the network syslog protocol
listener.
-->
<!--
<key>NetworkListener</key>
<dict>
<key>SockServiceName</key>
<string>syslog</string>
<key>SockType</key>
<string>dgram</string>
</dict>
-->


So basically:

Sockets
NetworkListener
SockServiceName = syslog
Socktype = dgram

(there are already 2 "Sockets" entries, you don't modify them, you add
the NetworkListener one).

It would be nice if Apple added this in the man page that discusses
changing the plist to enable listening to port 514
From: David Empson on 24 Mar 2010 07:05
JF Mezei <jfmezei.spamnot(a)vaxination.ca> wrote:

> Just spent quite a bit of time searching for this.
>
>
> On a Xserve (10.6 OS-X server), the com.apple.syslogd.plist lacks the
> "commented section" that enables listening on port 514 for syslog
> messages coming from routers etc.
>
> Lots of web pages mentioned you simply needed to uncomment it. But on my
> system, it wasn't there to be uncommented. (perhaps because I used plist
> editor forst and perhaps it zaps comments).

That seems likely. My 10.6 client and 10.6 Mac Mini Server both have a
commented out block as you describe at the end of

/System/Library/LaunchDaemons/com.apple.syslogd.list

Thanks anyway for the pointer. I might use that myself if I have
anything on my network which sends out syslog broadcasts.

> Anyways, just for sake of documenting (in case Google re-eneables
> searching of newsgroups)

I save copies of useful articles so Spotlight will find them (if I
remember reading something about the subject).

--
David Empson
dempson(a)actrix.gen.nz
 | 
Pages: 1
Prev: iPad CRUSHER!!!
Next: What CSMA & CSMS mean