Monday, October 11, 2010

DLink 2553 syslog

The DLink 2553 Wireless Access Point has the option of logging to a syslog server.
I configured on of my Linux machines to receive the syslog messages.

To make this happen I need to configure the linux machine to listen for and log messages and then configure the WAP to send them. I used a Mandriva 2010.1 machine which is using rsyslog as opposed to syslog so there are a few differences from what you may google. Rsyslog is in the process of removing all command line switches and replacing them with config file directives so the often googled add -r to syslog does not work.

The file /etc/rsyslog.d/00_common.conf has most of the rsyslog directives in it. In this file I found the following two lines and uncommented them.

$ModLoad imudp.so
$UDPServerRun 514

This enabled the UDP server on port 514. Then make sure that your firewall allows inbound packets on that port. I restarted the rsyslog server with the following command.

service rsyslogd restart

Now I logged into the DLink and entered the IP address of the linux machine and clicked apply.
Once it restarted I logged into one of the mobile machines and checked the log on the linux machine and to my happiness I saw some log messages.

Oct 11 15:23:34 192.168.1.21 hostapd: [Wireless]Group key update success:STA 00:16:FF:C2:E8:FF

Now I want to be able to send all of the Wireless messages to a separate file.