# Traffic from other subnet

**URL:** <https://community.graylog.org/t/traffic-from-other-subnet/2167>\
**Category:** Graylog Central (peer support)\
**Created:** [August 21, 2017, 3:00pm UTC](https://community.graylog.org/t/traffic-from-other-subnet/2167 "2017-08-21T15:00:28Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![arakoto](https://avatars.discourse-cdn.com/v4/letter/a/dc4da7/32.png) [@arakoto](https://community.graylog.org/u/arakoto)\
**Post date:** [August 21, 2017, 3:00pm UTC](https://community.graylog.org/t/traffic-from-other-subnet/2167/1 "2017-08-21T15:00:28Z")

</div>

Hi,  
I have sent syslog (UDP) from some servers on different subnet. I saw all traffic arrived on the graylog cluster but not processed (msg in/out=0/0).  
The graylog version is 2.3.  
Anyone can help me?

Thank you.

Andry.

---

<div class="post-metadata">

**Author:** ![jochen](https://sea2.discourse-cdn.com/flex016/user_avatar/community.graylog.org/jochen/32/8_2.png) [@jochen](https://community.graylog.org/u/jochen)\
**Post date:** [August 21, 2017, 3:17pm UTC](https://community.graylog.org/t/traffic-from-other-subnet/2167/2 "2017-08-21T15:17:11Z")

</div>

Please provide more details about your setup such as the network setup, the configuration of the Syslog UDP input in Graylog, and the configuration of the syslog daemons sending messages to Graylog.

Also make sure that no firewalls are blocking UDP packets to the Syslog UDP input.

---

<div class="post-metadata">

**Author:** ![arakoto](https://avatars.discourse-cdn.com/v4/letter/a/dc4da7/32.png) [@arakoto](https://community.graylog.org/u/arakoto)\
**Post date:** [August 21, 2017, 3:22pm UTC](https://community.graylog.org/t/traffic-from-other-subnet/2167/3 "2017-08-21T15:22:55Z")

</div>

I found the root cause . I have put the parameter rp\_filter to 2. It’s working now.  
Thank you.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/flex016/uploads/graylog/original/3X/c/7/c7c09c6b5099570133d6502b83f50ba4430de5b6.png) [@system](https://community.graylog.org/u/system)\
**Post date:** [September 4, 2017, 3:23pm UTC](https://community.graylog.org/t/traffic-from-other-subnet/2167/4 "2017-09-04T15:23:02Z")

</div>

Closed on September 4, 2017, 3:23pm UTC

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.