Page 1 of 1

filter in syslogd

Posted: Wed Sep 15, 2021 1:29 pm
by willemgrooters
I use the VMS port of SYSLOGD for tracking internet traffic - my router spews out messages to port 514; the log then shows a line in format:

Code: Select all

<date MMM dd> <time hh:mm:ss> <nodenam in domain> <sendername> <text>
But now I got a new kid on the block that I seem unable to control, and I get messages :

Code: Select all

<date MMM dd> <time hh:mm:ss> Unknown <<sendername> <text>
Sendername has a part that is the same, and one that is different.

I'm not sure yet how many of these messages will appear, but I don't need them. Given the SYSLOG.conf on the internet, there is just a limited set of facilities that can be used. My question is how can I prevent these messages appearing by filtering the off? As stated, it seems impossible to control the sending device...