How to capture logging mssgs on a 2821 router?

[saidfrh]

How do I direct logging data from the 2821 router to be stored on a workstation? I have downloaded Kiwi Syslog Daemon on to the workstation, however, logging is not captured. The command for the syslog server was configured on the router. Thanks

[saidfrh]

Jon,

On the production router, provided the following commands. Still nothing displays on the syslog server.

logging host 192.168.1.180

logging trap 6

exit

copy run start

[aaa]

Do you have logging facility in the 2821?

[saidfrh]

I have included the folowing statements.

logging on

logging host 192.168.1.180 [workstation/syslog computer]

logging trap 6

exit

copy run start

[saidfrh]

I prefer to send the router's logs to a separate computer to accept and store the logs. So far, I have not been successful in configuring Kiwi Syslog Daemon to accept the messages from the router.

[jcoke]

Basic question: Is there a firewall running on the syslog host?

-John

[saidfrh]

Yes, Windows firewall is running on the syslog host.

[jcoke]

Ok, either turn it off for testing or set an exclusion for UDP/514.

[saidfrh]

UDP/514 was added to exceptions, still no messages. Are you familiar with setting Kiwi Syslog?

[saidfrh]

I can ping from the Syslog computer to the router.

[saidfrh]

Hi Jon,

I got Kiwi Syslog working. The following are from syslogs on ASA5510 firewall. Do the two mssgs look right to you?

07:40:25: %ASA-4-419002: Duplicate TCP SYN from Inside: 192.168.1.170/3229 to outside:82.42.69.140/4219 with different initial sequence number

(I can not find who has IP 192.168.1.170. Trend Micro shows no one on the LAN .170

ASA-4-313005 : No matching connection for ICMP error message: icmp src outside: 76.189.113.82 dst inside: 207.105.y.x (type 3, code 1) on outside interface: Original payload: udp src 207.105.y.x/3919 dst 192.168.1.100/49593

Thanks.

Said