Rsyslog problem after ubuntu upgrade 10.4 to 12.4

Posted by Oxymoron on Ask Ubuntu See other posts from Ask Ubuntu or by Oxymoron
Published on 2012-10-15T15:26:26Z Indexed on 2012/10/15 15:54 UTC
Read the original article Hit count: 217

Filed under:
|

I was using Ubuntu 10.4 until last week for storing the log informations of a external device with rsyslog.

After upgrading to ubuntu 12.4 the logging of TCP doesn't works anymore. (There are just no pakets visible - not even with tcpdump - aold ubuntu machine still sees the pakets.) UDP works with the identical configuration on the ubuntu machine and a "use UDP" on the external device.

Are there any changes in rsyslog, that could explain this?

My rsyslog.conf file looks like this (with more comments):

$ModLoad imuxsock # provides support for local system logging
$ModLoad imklog   # provides kernel logging support (previously done by rklogd)
#$ModLoad immark  # provides --MARK-- message capability

$KLogPath /proc/kmsg

# provides UDP syslog reception
$ModLoad imudp
$UDPServerRun 514

# provides TCP syslog reception
$ModLoad imtcp
$InputTCPServerRun 514

###########################
#### GLOBAL DIRECTIVES ####
###########################

$ActionFileDefaultTemplate RSYSLOG_TraditionalFileFormat

# Set the default permissions for all log files.
#
$FileOwner syslog
$FileGroup adm
$FileCreateMode 0640
$DirCreateMode 0755
$Umask 0022
$PrivDropToUser syslog
$PrivDropToGroup syslog

if $fromhost-ip startswith '192.168.0.10' then /var/log/caliDevice.log
& ~
# local/regular rules, like
'.' /var/log/syslog.log

$IncludeConfig /etc/rsyslog.d/*.conf

© Ask Ubuntu or respective owner

Related posts about 12.04

Related posts about rsyslog