Showing results for 
Search instead for 
Did you mean: 
Create Post
Level 7

Wrong IP showing as from ?

Folks I have three Ciscos that are added as devices in Kiwi. Each sends the correct info to the syslog server as tested with WireShark. Kiwi shows the correct source IP from two machines but shows the other as Thing is it is random. If I delete the working device and restart Kiwi the non working one from before delete/restart now shows correct? I am on the 5 licence latest version on WinXP SP3 Pro server all ports default. If I shut down Kiwi and run The Dude syslog shows in its syslog page the correct IP from all the remote Cisco devices ( any ideas?

Tags (1)
2 Replies
Level 7

Did you find the solution? I have the same issue with Cisco switches.

Level 13

Is this a brand new install of Kiwi? I'd have to see your configuration to see what's going on. Are you using the static hosts file for DNS resolution? Are you filtering and forwarding messages back to Kiwi? Some devices have the option to send message as host and allow you to specify an IP address for the host or allow you to specify which Interface IP address is used for logging regardless of which interface the logs actually go out. But if another Syslog server is showing things correctly, I think it has to be a rule or setting in Kiwi somewhere.