remote log is no longer running?

[Revo2Maxx]

So went to look at my log files on my server for my cameras.. I found that I don't have any log files for a while now from any of my IP cameras.. I tested all of the IP of ones that I had setup to send log files to my syslog. When I check the syslog it says it is up and I can send a test message and it gets logged so I know the log is working?

Anyway when I look at the ip for my cameras this one being an Amcrest it says that it is closed. It is enabled in the cameras settings and tested for my Dahua cameras and they are showing same info?
revo2maxx@Rmaxxi7:~/Desktop$ sudo nmap -sU -p 514 10.0.0.237
Starting Nmap 7.80 ( Nmap: the Network Mapper - Free Security Scanner ) at 2025-03-01 08:06 EST
Nmap scan report for 10.0.0.237
Host is up (0.0057s latency).

PORT STATE SERVICE
514/udp closed syslog
MAC Address: 9C:8E:CD:xx:xx:xx (Amcrest Technologies)

Anyone running remote logs and are they still logging?


Mar 1 08:11:35 Rmaxxi7 revo2maxx Test log message
Mar 1 08:27:10 Rmaxxi7 revo2maxx Test log message2

 

[Revo2Maxx]

so I just checked another camera that I don't normally log into the normal files but it does show that my syslog is working but seems the other IPs have been blocked by my firewall in my server maybe because they were flooding the log files?

revo2maxx@Rmaxxi7:~/Desktop$ sudo tcpdump -i eno1 port 514 -A
tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
listening on eno1, link-type EN10MB (Ethernet), capture size 262144 bytes
08:52:08.122237 IP 10.0.0.36.56566 > Rmaxxi7.syslog: SYSLOG lpr.info, length: 112
E.....@.@.&(
..$
........x..<54> Mar 01 08:52:07 10.0.0.36 "LogIn"
{
"Address" : "10.0.0.22",
"Type" : "WSSE",
"User" : "admin"
}
.
08:52:08.122734 IP 10.0.0.36.56566 > Rmaxxi7.syslog: SYSLOG lpr.info, length: 93
E..y..@.@.&;
..$
........e1.<54> Mar 01 08:52:07 10.0.0.36 "LogOut"
{
"Address" : "10.0.0.22",
"User" : "admin"
}
.
08:53:49.091583 IP 10.0.0.36.56566 > Rmaxxi7.syslog: SYSLOG lpr.info, length: 93
E..y..@.@.&;
..$
........e,.<54> Mar 01 08:53:48 10.0.0.36 "LogOut"
{
"Address" : "10.0.0.22",
"User" : "admin"

 

[Revo2Maxx]

Ok well I don't know why things were not working. Maybe I did an update that changed something in my setup but they are working now. I mean I will have to go and clean it up some but at least it is logging to the ipcamera.log again..

revo2maxx@Rmaxxi7:~/Desktop$ tail -f /var/log/ipcamera.log
Mar 1 10:28:23 10.0.0.236 "LogIn"#012{#012 "Address" : "10.0.0.17",#012 "Type" : "Web3.0",#012 "User" : "admin"#012}
Mar 1 10:28:39 10.0.0.236 "LogOut"#012{#012 "Address" : "10.0.0.17",#012 "Type" : "Web3.0",#012 "User" : "admin"#012}
Mar 1 09:32:37 10.0.0.237 "LogIn"#012{#012 "Address" : "10.0.0.17",#012 "Type" : "Web3.0",#012 "User" : "admin"#012}
Mar 1 09:32:37 10.0.0.237 "SetCurrentTime"#012{#012 "Address" : "10.0.0.17",#012 "Before" : "03-01-2025 09:32:36",#012 "Type" : "Web3.0",#012 "User" : "admin"#012}
Mar 1 09:32:50 10.0.0.237 "LogOut"#012{#012 "Address" : "10.0.0.17",#012 "User" : "admin"#012}
Mar 1 09:33:31 10.0.0.36 "LogIn"#012{#012 "Address" : "10.0.0.17",#012 "Type" : "Web3.0",#012 "User" : "admin"#012}
Mar 1 09:33:31 10.0.0.36 "LogIn"#012{#012 "Address" : "10.0.0.17",#012 "Type" : "Web3.0",#012 "User" : "admin"#012}
Mar 1 09:33:46 10.0.0.36 "LogIn"#012{#012 "Address" : "10.0.0.17",#012 "Type" : "WSSE",#012 "User" : "admin"#012}
Mar 1 09:33:46 10.0.0.36 "LogOut"#012{#012 "Address" : "10.0.0.17",#012 "User" : "admin"#012}
Mar 1 09:33:46 10.0.0.36 "LogIn"#012{#012 "Address" : "10.0.0.17",#012 "Type" : "WSSE",#012 "User" : "admin"#012}
Mar 1 09:33:46 10.0.0.36 "LogOut"#012{#012 "Address" : "10.0.0.17",#012 "User" : "admin"#012}