Syslogging

So I guess it's not routing if you can ping the syslog server. Just to confirm, can you remove the UDP filter from the tcpdump and see whether the pings are going out via a switch port (viewable in a 0.0 trace) or through the management port (viewable in a trace on eth0)?

 

 

tcpdump -i 0.0 host x.x.x.x

 

tcpdump -i eth0 host x.x.x.x

 

 

Can you try specifying a facility in the logger test:

 

 

logger -p local0.debug "test message"

 

 

Thanks,

 

Aaron