Rsyslog problem after ubuntu upgrade 10.4 to 12.4
- by Oxymoron
I was using Ubuntu 10.4 until last week for storing the log informations of a external device with rsyslog.
After upgrading to ubuntu 12.4 the logging of TCP doesn't works anymore.
(There are just no pakets visible - not even with tcpdump - aold ubuntu machine still sees the pakets.)
UDP works with the identical configuration on the ubuntu machine and a "use UDP" on the external device.
Are there any changes in rsyslog, that could explain this?
My rsyslog.conf file looks like this (with more comments):
$ModLoad imuxsock # provides support for local system logging
$ModLoad imklog # provides kernel logging support (previously done by rklogd)
#$ModLoad immark # provides --MARK-- message capability
$KLogPath /proc/kmsg
# provides UDP syslog reception
$ModLoad imudp
$UDPServerRun 514
# provides TCP syslog reception
$ModLoad imtcp
$InputTCPServerRun 514
###########################
#### GLOBAL DIRECTIVES ####
###########################
$ActionFileDefaultTemplate RSYSLOG_TraditionalFileFormat
# Set the default permissions for all log files.
#
$FileOwner syslog
$FileGroup adm
$FileCreateMode 0640
$DirCreateMode 0755
$Umask 0022
$PrivDropToUser syslog
$PrivDropToGroup syslog
if $fromhost-ip startswith '192.168.0.10' then /var/log/caliDevice.log
& ~
# local/regular rules, like
'.' /var/log/syslog.log
$IncludeConfig /etc/rsyslog.d/*.conf
