Logwatch is picking up Network Switches Hostnames

Posted on

Something odd has happened with Logwatch as I'm replacing all of my RHEL5 servers with RHEL6.

Recently in the last few days, there are four network switches, with their hostnames showing up in the area of RHEL servers that are sending their logs to the Logwatch server and the daily report. Just their hostnames are showing up, and nothing else.

I believe Logwatch works on udp traffic, and these switches' traffic is getting captured on the port Logwatch listens on?

I was wondering if others have seen this or what to make of it?

thanks

Close

Welcome! Check out the Getting Started with Red Hat page for quick tours and guides for common tasks.