Bay Networks 5390, Administering, Page: 534 / 888

B1-26 893-741-B
Network Administration
Event Logging Using syslog
The Model 5390 server can log events for a system running a 4.3BSD-style syslog daemon or syslog
to a serial port on the Model 5390 server. The Model 5390 server syslog_port parameter defines
the port to which logged messages are sent (for more details, see Using Event Logging on page
A2-19 and syslog_port on page C2-62).
The logged message includes:
• The date and time of the event.
• The name or IP address of the Model 5390 server on which the event occurred.
• The name of the event and PID of the Model 5390 process.
• A description of the event.
In the following example, on May 5, at 9:19 a.m., a user named Worth on port 8 of 5390_01 issued
the rlogin command to host galago.
May 5 9:19:03 5390_01 cli[598]:Job-Begin:8:rlogin galago:Worth
The information display differs, depending on the event. In the following example of a typical
message, a time server updates the Model 5390 time. The time server host’s address displays in
hexadecimal longword. Times are expressed in hexadecimal as the number of seconds since 00:00:00
January 1, 1970.
Jan 5 9:56:5 annex timed[38]:adjusting time from host
5fc809c0: old=25bf1398, new=25bf1399, delta=1
The next example shows a user on port 9 of annex issuing the telnet command to access another
Model 5390 server.
May 5 8:56:3 annex telnet_cmd[35]:Telnet-Begin:9:telnet annex1
The next example shows a request for the printer on annex through the port server.
May 5 8:17:5 annex rdr[39]:Port-Begin:14:RDP:LPRt10:Actg:ager
You can create audit trails and accounting reports for the Model 5390 server and its serial ports by
sorting and merging log entries.