Hi All,

I've been messing around with the AIX 5L syslogd process. This is more
of an educational project, as I have not really made use of it
properly. I'm trying to understand it better and see how it might be
used for auditing purposes.

>From what I understand, the syslog daemon can be used to capture
various messages that it receives and places these messages into a
logfile you designate in the /etc/syslog.conf file.

What I would like to do is the following: I have an HP Laserjet 8100
with the JetDirect card in it. The card has an option called "Syslog
server" which I have been told can tell the printer to direct any
messages to a syslog server at a designated IP address.

So let's say my network is defined as follows:

- RS/6000 host is 192.168.77.251
- HP 8100 is at 192.168.44.101
- The default gateway to get from printer to host is 192.168.44.1

So I set my HP JetDirect as follows:

IP Address : 192.168.44.101
Subnet Mask : 255.255.255.0
Default Gateway : 192.168.44.1
Syslog Server : 192.168.77.251

On the RS/6000, I edited the /etc/syslog.conf to contain:

lpr.debug /var/adm/printer.log
*.debug /var/adm/all.debug

I run "refresh -s syslogd" and it says it is successful. I have
"touch"ed the two files in question and even gave them a+rw
permissions. However, nothing shows up in either log about the print
jobs going to the HP 8100 printer. I do get other activities, such as
the refresh:

Nov 12 14:25:32 testsrvr syslogd: restart

Any ideas what might be blocking it from coming in? My only guess was
that perhaps our routers or firewall are blocking traffic on port 514,
which I think is the syslog service port.

TIA.

Steve