1. Install syslog-ng # apt-get install syslog-ng 2. Edit /etc/syslog-ng/syslog-ng.conf Find the line: # (this is equivalent to the "-r" syslogd flag) # udp(); and change it to: # (this is equivalent to the "-r" syslogd flag) udp(); At the bottom of the file, add: filter f_routers { facility(local5); }; log { source(s_all); filter(f_routers); destination(routers); }; destination routers { file("/var/log/network/$YEAR/$MONTH/$DAY/$HOST-$YEAR-$MONTH-$DAY-$HOUR.log" owner(root) group(root) perm(0644) dir_perm(0755) create_dirs(yes) template("$YEAR $DATE $HOST $MSG\n")); }; 3. Create the directory /var/log/network/ # mkdir /var/log/network/ 4. Restart syslog-ng: # /etc/init.d/syslog-ng restart 5. See if messages are starting to appear under /var/log/network/2008/02/24/...