Traduisez - Übersetzen - Traduzca - Traduza - Tradurre - Translate

VanLUG Email Archive

Re: Why Do Hackers Do This?

Ted Powell
Thu, 1 Oct 1998 10:51:45 -0700

On Thu, Oct 01, 1998 at 02:16:01AM -0700, Andrew Daviel wrote:
> [...]
> I seem to remember that it's possible to redirect syslog to another
> machine (man syslog.conf). Haven't tried it; was meaning to some time.

It's certainly true for SunOS. I used to administer a network which
included five such systems. It made keeping an eye on things much easier,
needing only a single window with tail -f on the messages file. Note
that each line
Sep 27 11:06:40 eslvcr in.telnetd[13208]: refused connect from ras5-38.bbsi.net
includes a host field^.

Remote Machine
This syslogd(8) provides full remote logging, i.e. is able
to send messages to a remote host running syslogd(8) and
to receive messages from remote hosts. The remote host
won't forward the message again, it will just log them
locally. To forward messages to another host, prepend the
hostname with the at sign (``@'').

Using this feature you're able to control all syslog mes-
sages on one host, if all other machines will log remotely
to that. This tears down administration needs.
...

*.* @finlandia

This rule would redirect all messages to a remote host
called finlandia. This is useful especially in a cluster
of machines where all syslog messages will be stored on
only one machine.

-- 




  http://psg.com/~ted/  (Ted Powell)
If your hard drive crashes, perhaps you have a recent backup. If Earth
crashes, what then? We need off-site backup: Luna, L5, Mars, wherever.