configuring syslogd for external messages

[iamsam]

Hi, I have a netgear router that I configured to fire log messages to an HP-UX system (C3700/HPUX 11i) and it works... all the warnings are in the var/adm/syslog/syslog.log file. here is a sample of 3 lines

Jan 31 15:17:43 192.168.0.1 FVS318 [111252]:TCP(18420) Dest IP : 70.48.45.32, Src IP :216.49.88.118
Jan 31 15:17:43 192.168.0.1 FVS318 [111253]:TCP(18165) Dest IP :
70.48.45.32, Src IP :216.49.88.118
Jan 31 15:17:43 192.168.0.1 FVS318 [111254]:TCP(18201) Dest IP :
70.48.45.32, Src IP :216.49.88.118
is there a way to have them redirected to a separate logfile (i.e. fvs318.log) ? I tried modifying the /etc/syslog.conf file but can't seem to figure out the proper selector for these messages...

any suggestions will be appreciated
thanks

[RAC_1]

Try putting @host /some_dir/some_file

[iamsam]

i you mean on the router end... no luck, on, I can only specify an IP. I would think there is a way to tell syslogd to write messages coming from external hosts to a separate file ?

[PeterWolfe]

>I would think there is a way to tell syslogd to write
>messages coming from external hosts to a separate file ?

Stock syslogd can filter on a message's facility and severity
(see syslogd(1M) for details).

Starting with 11i V2 December 05, syslog-ng (next
generation)is included with HP-UX. syslog-ng has
significantly more powerful filtering features
can be easily configured to filter on hostnames.

pete

[iamsam]

thanks for the latest suggestions... unfortunately, 11iV2 isn't supported on my C3700 PA-RISC workstation... so back to script solution to extract those lines I am interested in analyzing

[Muthukumar_5]

what is the configuration you have done in /etc/syslog.conf. Try to use logger utility to check the error or warning redirection.

I feel it is also better to go with shell solution too. :)

--
Muthu