Hi Bernd, ---------------------------------------------- mail:/etc # logger -p "local7.info" "Dies ist mein Test-Text" ---------------------------------------------- ergibt die Ausgabe: ---------------------------------------------- Sep 19 23:32:16 mail root: Dies ist mein Test-Text ---------------------------------------------- Soweit in Ordnung. Vom dhcpd fehlt aber jegliche Spur. Solange in der dhcp.conf drinsteht ---------------------------------------------- log-facility local7; ---------------------------------------------- Tut sich ausser der Meldung beim starten des dhcpd gar nichts. ---------------------------------------------- Sep 19 23:35:21 mail dhcpd: Internet Systems Consortium DHCP Server V3.0.3 Sep 19 23:35:21 mail dhcpd: Copyright 2004-2005 Internet Systems Consortium. Sep 19 23:35:21 mail dhcpd: All rights reserved. Sep 19 23:35:21 mail dhcpd: For info, please visit http://www.isc.org/sw/dhcp/ Sep 19 23:35:21 mail dhcpd: Not searching LDAP since ldap-server, ldap-port and ldap-base-dn were not specified in the config file Sep 19 23:35:21 mail dhcpd: Internet Systems Consortium DHCP Server V3.0.3 Sep 19 23:35:21 mail dhcpd: Copyright 2004-2005 Internet Systems Consortium. Sep 19 23:35:21 mail dhcpd: All rights reserved. Sep 19 23:35:21 mail dhcpd: For info, please visit http://www.isc.org/sw/dhcp/ Sep 19 23:35:22 mail dhcpd: Not searching LDAP since ldap-server, ldap-port and ldap-base-dn were not specified in the config file Sep 19 23:35:22 mail dhcpd: Wrote 0 deleted host decls to leases file. Sep 19 23:35:22 mail dhcpd: Wrote 0 new dynamic host decls to leases file. Sep 19 23:35:22 mail dhcpd: Wrote 1 leases to leases file. Sep 19 23:35:22 mail dhcpd: Listening on LPF/eth0/00:48:54:6a:ab:23/192.168.80/24 Sep 19 23:35:22 mail dhcpd: Sending on LPF/eth0/00:48:54:6a:ab:23/192.168.80/24 Sep 19 23:35:22 mail dhcpd: Sending on Socket/fallback/fallback-net ---------------------------------------------- Kommentiere ich die Zeile mit log-facility aus, sehe ich sofort die Meldungen, die ich suche (habe ich aber auch gerade eben erst herausgefunden... ;-) ) Wo steckt das Problem? ---------------------------------------------- Sep 19 23:35:55 mail dhcpd: DHCPREQUEST for 192.168.80.200 from 00:08:54:41:74:5d via eth0 Sep 19 23:35:55 mail dhcpd: DHCPACK on 192.168.80.200 to 00:08:54:41:74:5d via eth0 ---------------------------------------------- Meine /etc/syslog-ng/syslog-ng.conf: ---------------------------------------------- mail:/etc/syslog-ng # mail:/etc/syslog-ng # cat syslog-ng.conf # # /etc/syslog-ng/syslog-ng.conf # # Automatically generated by SuSEconfig on Fr Aug 4 07:59:03 CEST 2006. # # PLEASE DO NOT EDIT THIS FILE! # # you can modify /etc/syslog-ng/syslog-ng.conf.in instead # # # # File format description can be found in syslog-ng.conf(5) # and /usr/share/doc/packages/syslog-ng/syslog-ng.txt. # # # Global options. # options { long_hostnames(off); sync(0); perm(0640); stats(3600); }; # # 'src' is our main source definition. you can add # more sources driver definitions to it, or define # your own sources, i.e.: # #source my_src { .... }; # source src { # # include internal syslog-ng messages # note: the internal() soure is required! # internal(); # # the following line will be replaced by the # socket list generated by SuSEconfig using # variables from /etc/sysconfig/syslog: # unix-dgram("/dev/log"); # # uncomment to process log messages from network: # #udp(ip("0.0.0.0") port(514)); }; # # Filter definitions # filter f_iptables { facility(kern) and match("IN=") and match("OUT="); }; filter f_console { level(warn) and facility(kern) and not filter(f_iptables) or level(err) and not facility(authpriv); }; filter f_newsnotice { level(notice) and facility(news); }; filter f_newscrit { level(crit) and facility(news); }; filter f_newserr { level(err) and facility(news); }; filter f_news { facility(news); }; filter f_mailinfo { level(info) and facility(mail); }; filter f_mailwarn { level(warn) and facility(mail); }; filter f_mailerr { level(err, crit) and facility(mail); }; filter f_mail { facility(mail); }; filter f_cron { facility(cron); }; filter f_local { facility(local0, local1, local2, local3, local4, local5, local6, local7); }; filter f_acpid { match('^\[acpid\]:'); }; filter f_netmgm { match('^NetworkManager:'); }; filter f_messages { not facility(news, mail) and not filter(f_iptables); }; filter f_warn { level(warn, err, crit) and not filter(f_iptables); }; filter f_alert { level(alert); }; # # Enable this, if you want to keep all messages in one file: # (don't forget to provide logrotation config) # destination allmessages { file("/var/log/allmessages"); }; destination allmessconsole { file("/dev/tty12"); }; log { source(src); destination(allmessages); }; log { source(src); destination(allmessconsole); }; # # Most warning and errors on tty10 and on the xconsole pipe: # destination console { file("/dev/tty10" group(tty) perm(0620)); }; log { source(src); filter(f_console); destination(console); }; destination xconsole { pipe("/dev/xconsole" group(tty) perm(0400)); }; log { source(src); filter(f_console); destination(xconsole); }; # Enable this, if you want that root is informed immediately, # e.g. of logins: # #destination root { usertty("root"); }; #log { source(src); filter(f_alert); destination(root); }; # # News-messages in separate files: # destination newscrit { file("/var/log/news/news.crit" owner(news) group(news)); }; log { source(src); filter(f_newscrit); destination(newscrit); }; destination newserr { file("/var/log/news/news.err" owner(news) group(news)); }; log { source(src); filter(f_newserr); destination(newserr); }; destination newsnotice { file("/var/log/news/news.notice" owner(news) group(news)); }; log { source(src); filter(f_newsnotice); destination(newsnotice); }; # # and optionally also all in one file: # (don't forget to provide logrotation config) # #destination news { file("/var/log/news.all"); }; #log { source(src); filter(f_news); destination(news); }; # # Mail-messages in separate files: # destination mailinfo { file("/var/log/mail.info"); }; log { source(src); filter(f_mailinfo); destination(mailinfo); }; destination mailwarn { file("/var/log/mail.warn"); }; log { source(src); filter(f_mailwarn); destination(mailwarn); }; destination mailerr { file("/var/log/mail.err" fsync(yes)); }; log { source(src); filter(f_mailerr); destination(mailerr); }; # # and also all in one file: # destination mail { file("/var/log/mail"); }; log { source(src); filter(f_mail); destination(mail); }; # # acpid messages in one file: # destination acpid { file("/var/log/acpid"); }; log { source(src); filter(f_acpid); destination(acpid); flags(final); }; # # NetworkManager messages in one file: # destination netmgm { file("/var/log/NetworkManager"); }; log { source(src); filter(f_netmgm); destination(netmgm); flags(final); }; # # Cron-messages in one file: # (don't forget to provide logrotation config) # #destination cron { file("/var/log/cron"); }; #log { source(src); filter(f_cron); destination(cron); }; # # Some boot scripts use/require local[1-7]: # destination localmessages { file("/var/log/localmessages"); }; log { source(src); filter(f_local); destination(localmessages); }; # # All messages except iptables and the facilities news and mail: # destination messages { file("/var/log/messages"); }; log { source(src); filter(f_messages); destination(messages); }; # # Firewall (iptables) messages in one file: # destination firewall { file("/var/log/firewall"); }; log { source(src); filter(f_iptables); destination(firewall); }; # # Warnings (except iptables) in one file: # destination warn { file("/var/log/warn" fsync(yes)); }; log { source(src); filter(f_warn); destination(warn); }; mail:/etc/syslog-ng # ---------------------------------------------- Ich schätze mal, dass hier irgendwo der Fehler stecken wird - doch wo??? Michael