сбор логов syslog-ng

apt-get -y install syslog-ng

/etc/syslog-ng/syslog-ng.conf
source lan { udp ();};
destination netlog { file("/var/log/net.log");};
log { source(lan); destination(netlog); };

/etc/logrotate.d/net.log
/var/log/net.log {
daily
rotate 7
compress
missingok
create 640 root adm
delaycompress
}

/etc/init.d/syslog-ng reload