總體來說，如果做企業(yè)級(jí)日志管理分析，我們第一步就需要接入設(shè)備的日志，而大部分的操作系統(tǒng)都是支持syslog的，一般我們對(duì)日志這種敏感級(jí)別不是很高的信息通過UDP的形式從客戶機(jī)發(fā)送到syslog接收服務(wù)器，syslog我們一般不會(huì)主動(dòng)去采集，而是當(dāng)客戶機(jī)上有操作時(shí)產(chǎn)生的日志會(huì)自動(dòng)發(fā)送到syslog接收服務(wù)器。下面是一個(gè)接收syslog的例子。

package com.tony.util;
import java.io.IOException;
import java.net.DatagramPacket;
import java.net.DatagramSocket;
import java.net.InetAddress;
import java.net.InetSocketAddress;
import java.net.SocketException;

/**
 * Copyright 2015 HP
 * All right reserved.    
 * UDP服務(wù)類.  采集syslog   
 * @version 1.0 
 * Creation date: 2015-8-18 - 下午16:32:31
 */
public class UdpServerSocket {
    private byte[] buffer = new byte[1024];
    
    private DatagramSocket ds = null;

    private DatagramPacket packet = null;

    private InetSocketAddress socketAddress = null;

    private String orgIp;

    /**
     * 構(gòu)造函數(shù)，綁定主機(jī)和端口.
     * @param host 主機(jī)
     * @param port 端口
     * @throws Exception
     */
    public UdpServerSocket(String host, int port) throws Exception {
        socketAddress = new InetSocketAddress(host, port);
        ds = new DatagramSocket(socketAddress);
        System.out.println("--------------service start----------------");
    }
    
    public final String getOrgIp() {
        return orgIp;
    }

    /**
     * 設(shè)置超時(shí)時(shí)間，該方法必須在bind方法之后使用.
     * @param timeout 超時(shí)時(shí)間
     * @throws Exception
     */
    public final void setSoTimeout(int timeout) throws Exception {
        ds.setSoTimeout(timeout);
    }

    /**
     * 獲得超時(shí)時(shí)間.
     * @return 返回超時(shí)時(shí)間.
     * @throws Exception
     
      - 下午10:34:36
     */
    public final int getSoTimeout() throws Exception {
        return ds.getSoTimeout();
    }

    /**
     * 綁定監(jiān)聽地址和端口.
     * @param host 主機(jī)IP
     * @param port 端口
     * @throws SocketException
     
      - 下午10:36:17
     */
    public final void bind(String host, int port) throws SocketException {
        socketAddress = new InetSocketAddress(host, port);
        ds = new DatagramSocket(socketAddress);
    }


    /**
     * 接收數(shù)據(jù)包，該方法會(huì)造成線程阻塞.
     * @return 返回接收的數(shù)據(jù)串信息
     * @throws IOException
     
      - 下午10:38:24
     */
    public final String receive() throws IOException {
        packet = new DatagramPacket(buffer, buffer.length);
        ds.receive(packet);
        orgIp = packet.getAddress().getHostAddress();
        String info = new String(packet.getData(), 0, packet.getLength());
        System.out.println(info);
        //System.out.println("CONTENT="+info+":SOURCE_IP="+packet.getAddress().getHostAddress()+"SOURCE_PORT:"+packet.getPort());
        return info;
    }

    /**
     * 將響應(yīng)包發(fā)送給請(qǐng)求端.
     * @param bytes 回應(yīng)報(bào)文
     * @throws IOException
     
      - 下午11:05:31
     */
    public final void response(String info) throws IOException {
        System.out.println("Client IP" + packet.getAddress().getHostAddress()
                + ",Port：" + packet.getPort());
        DatagramPacket dp = new DatagramPacket(buffer, buffer.length, packet
                .getAddress(), packet.getPort());
        dp.setData(info.getBytes());
        ds.send(dp);
    }

    /**
     * 設(shè)置報(bào)文的緩沖長度.
     * @param bufsize 緩沖長度
     
      - 下午10:47:49
     */
    public final void setLength(int bufsize) {
        packet.setLength(bufsize);
    }

    /**
     * 獲得發(fā)送回應(yīng)的IP地址.
     * @return 返回回應(yīng)的IP地址
     
      - 下午10:48:27
     */
    public final InetAddress getResponseAddress() {
        return packet.getAddress();
    }

    /**
     * 獲得回應(yīng)的主機(jī)的端口.
     * @return 返回回應(yīng)的主機(jī)的端口.
     
      - 下午10:48:56
     */
    public final int getResponsePort() {
        return packet.getPort();
    }

    /**
     * 關(guān)閉udp監(jiān)聽口.
     
      - 下午10:49:23
     */
    public final void close() {
        try {
            ds.close();
        } catch (Exception ex) {
            ex.printStackTrace();
        }
    }

    /**
     * 測試方法.
     * @param args
     * @throws Exception

      - 下午10:49:50
     */
    public static void main(String[] args) throws Exception {
        //這里的IP是你本機(jī)的IP也就是syslog服務(wù)器的IP
        String serverHost = "192.168.100.188";
        int serverPort = 514;
        UdpServerSocket udpServerSocket = new UdpServerSocket(serverHost, serverPort);
        while (true) {
            udpServerSocket.receive();
        }
    }
}