Re: Can a Cisco router act as a syslog *server*?

On 13 Dec, 16:11, Chris <mandrake...@xxxxxxxxxxx> wrote:
On Sat, 13 Dec 2008 13:00:39 GMT, Goldrider wrote:
Hi,

I have a strange question:
Is it possible to config a Cisco 800 series router a as a syslog
server?

I know it can log to a syslog server, but can I use it the other way
around?

I have non-cisco network device wich sometimes crashes, and I want to
monitor it's logs, However I do not want to run a PC day an night for
receiving syslog messages. (very low traffic too)

Can the cisco 857 be configured to accept syslog messages from other
hosts? (a.k.a. be a syslog server receiving on UDP port 514)

Greetings,
S.

Don't think so.

Nor me, however -

The following might assist

1.
If you set up an access list to match the syslog traffic
with logging you could at least determine the times that
syslogs were generated.

2.
If you set up a packet debug you might see more info
but not much I wouldn't think.
deb ip pac 199 det
access-list 199 to match syslog


3.
If you were able to use the new packet capture facility
such that the packets could be stored locally and then
subsequently exported or viewed you might be able to
simulate a syslog server. Depends just how desperate
you are. Not sure if 857 supports this feature or not.
877 with Advanced IP Services feature set does.
Adv. IP serv. does not run on 857.
http://www.cisco.com/en/US/docs/ios/12_4t/12_4t11/ht_rawip.html#wp1051807
Needs 12.4(11)T or later.

1. does not affect system CPU significantly

2 and 3 will I would imagine.
.

Relevant Pages

  • RE: very busy syslog server
    ... The CPU utilization in average is between 15% and 20%. ... This machine is being used _only_ for the sysloging - the database resides on another server. ... Subject: Re: very busy syslog server ... than one packet per interrupt. ...
    (freebsd-performance)
  • Re: Need to implemet Syslog server
    ... >On my network I need to implement a Syslog server ... Pretty much everything but Windows will ... likely talk to syslog if told to, ... A great many other managed network devices support syslogging, ...
    (Security-Basics)
  • [HPADM] SUMMARY: syslog redirection
    ... server is down, entries will be lost. ... Syslog sends over UDP on a "broadcast and forget" concept. ... information that is subject to United States laws and regulations. ... I'm being asked to route syslog messages to a central server. ...
    (HP-UX-Admin)
  • Re: How to allow port 514?
    ... a packet filter allows traffic into the server itself. ... If you want to run your syslog on the server you would use a packet filter. ... In ISA Policy Elements, right click Protocol Definitions, ... in Publishing, right click Server ...
    (microsoft.public.windows.server.sbs)
  • RE: Syslog Server on Debian Etch
    ... Syslog was working fine on the clients, I had it installed to a diff ... Is anyone else monitoring Juniper Netscreen firewalls? ... Syslog Server on Debian Etch ...
    (Debian-User)