Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 12 Feb 2001 20:26:38 -0700
From:      G-der <gder@gder.net>
To:        freebsd-questions@freebsd.org
Subject:   syslog.conf - duplicate entries in logs
Message-ID:  <20010212202638.A52861@gder.net>

next in thread | raw e-mail | index | archive | help
I installed portsentry and didn't like all the spam I was getting in
messages.  portsentry sends messages to syslogd using daemon.notice so I
put the folowing line in my syslog.conf file.

daemon.notice                                   /var/log/portsentry

After a few tests I see that connection attempts are logged not only in
/var/log/portsentry but also in messages as well.

A few lines above my entry is:

*.notice;kern.debug;lpr.info;mail.crit;news.err /var/log/messages

Notice the *.notice.  I was wondering how I might be able to safely
change this so that I can seperate my portsentry entries from the rest
of the *.notice entries.

I also tried

!portsentry
*.*                                             /var/log/portsentry

In syslog.conf - still get spam in messages as well...

One option I had though of was to recompile portsentry to use
one of the local?.info facalitys from syslog(3)

i would rather fix this in syslog.conf if possible though.

A cc to me on replies would be apreciated as well

Thanks in advance 

G-der
gder@gder.net
aka
Gene Dinkey


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20010212202638.A52861>