f



Syslogd on 10.6: enabling UDP listening on 514

Just spent quite a bit of time searching for this.


On a Xserve (10.6 OS-X server), the com.apple.syslogd.plist lacks the
"commented section" that enables listening on port 514 for syslog
messages coming from routers etc.

Lots of web pages mentioned you simply needed to uncomment it. But on my
system, it wasn't there to be uncommented. (perhaps because I used plist
editor forst and perhaps it zaps comments).

Anyways, just for sake of documenting (in case Google re-eneables
searching of newsgroups)

http://www.opensource.apple.com/source/syslog/syslog-69.0.3/syslogd.tproj/com.apple.syslogd.plist


<!--
	Un-comment the following lines to enable the network syslog protocol
listener.
-->
<!--
		<key>NetworkListener</key>
		<dict>
			<key>SockServiceName</key>
			<string>syslog</string>
			<key>SockType</key>
			<string>dgram</string>
		</dict>
-->


So basically:

Sockets
	NetworkListener
		SockServiceName = syslog
		Socktype = dgram

(there are already 2 "Sockets" entries, you don't modify them, you add
the NetworkListener one).

It would be nice if Apple added this in the man page that discusses
changing the plist to enable listening to port 514
0
3/24/2010 10:48:39 AM
comp.sys.mac.system 33446 articles. 2 followers. jfmezei.spamnot (9469) is leader. Post Follow

1 Replies
1644 Views

Similar Articles

[PageSpeed] 51

JF Mezei <jfmezei.spamnot@vaxination.ca> wrote:

> Just spent quite a bit of time searching for this.
> 
> 
> On a Xserve (10.6 OS-X server), the com.apple.syslogd.plist lacks the
> "commented section" that enables listening on port 514 for syslog
> messages coming from routers etc.
> 
> Lots of web pages mentioned you simply needed to uncomment it. But on my
> system, it wasn't there to be uncommented. (perhaps because I used plist
> editor forst and perhaps it zaps comments).

That seems likely. My 10.6 client and 10.6 Mac Mini Server both have a
commented out block as you describe at the end of 

/System/Library/LaunchDaemons/com.apple.syslogd.list

Thanks anyway for the pointer. I might use that myself if I have
anything on my network which sends out syslog broadcasts.

> Anyways, just for sake of documenting (in case Google re-eneables
> searching of newsgroups)

I save copies of useful articles so Spotlight will find them (if I
remember reading something about the subject).

-- 
David Empson
dempson@actrix.gen.nz
0
dempson
3/24/2010 11:05:12 AM
Reply: