Skip site navigation (1)Skip section navigation (2)
Date:      Sat, 16 Jan 2010 16:23:37 +0000
From:      Anton Shterenlikht <mexas@bristol.ac.uk>
To:        freebsd-questions@freebsd.org
Subject:   syslog - ipmon(8) logs to a wrong log file?
Message-ID:  <20100116162337.GI91835@mech-cluster241.men.bris.ac.uk>

next in thread | raw e-mail | index | archive | help
This is on FreeBSD 9.0-CURRENT ia64.
I've ipfilter built into the kernel,
with logging enabled:

options         IPFILTER
options         IPFILTER_DEFAULT_BLOCK
options         IPFILTER_LOG

It works fine, but logs to a wrong file.


I run ipmon with -Ds options:

# ps ax|grep ipmon
  740  ??  Ss     1:28.09 /sbin/ipmon -Ds
#

"D" is for deamon mode, and "s" is to log via syslog.
According to ipmon(8): 

	The default facility when compiled and installed is security.

So I've in /etc/syslog.conf:

security.*                                      /var/log/ipfilter.log

but I get all ipmon messages in /var/log/messages.
According to my /etc/syslog.conf this file shouldn't
have ipmon messages: 

*.notice;authpriv.none;kern.debug;lpr.info;mail.crit;news.err   /var/log/messages
 

What am I doing wrong?

Please advise
many thanks

-- 
Anton Shterenlikht
Room 2.6, Queen's Building
Mech Eng Dept
Bristol University
University Walk, Bristol BS8 1TR, UK
Tel: +44 (0)117 331 5944
Fax: +44 (0)117 929 4423



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20100116162337.GI91835>