From owner-freebsd-questions Mon Feb 12 19:26:42 2001 Delivered-To: freebsd-questions@freebsd.org Received: from ghostwheel.tribble.net (ghostwheel.tribble.net [206.124.26.66]) by hub.freebsd.org (Postfix) with ESMTP id 475AD37B4EC for ; Mon, 12 Feb 2001 19:26:39 -0800 (PST) Received: (from gder@localhost) by ghostwheel.tribble.net (8.11.1/8.11.1) id f1D3QcQ53165 for freebsd-questions@freebsd.org; Mon, 12 Feb 2001 20:26:38 -0700 (MST) (envelope-from gder) Date: Mon, 12 Feb 2001 20:26:38 -0700 From: G-der To: freebsd-questions@freebsd.org Subject: syslog.conf - duplicate entries in logs Message-ID: <20010212202638.A52861@gder.net> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline User-Agent: Mutt/1.2.5i Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG I installed portsentry and didn't like all the spam I was getting in messages. portsentry sends messages to syslogd using daemon.notice so I put the folowing line in my syslog.conf file. daemon.notice /var/log/portsentry After a few tests I see that connection attempts are logged not only in /var/log/portsentry but also in messages as well. A few lines above my entry is: *.notice;kern.debug;lpr.info;mail.crit;news.err /var/log/messages Notice the *.notice. I was wondering how I might be able to safely change this so that I can seperate my portsentry entries from the rest of the *.notice entries. I also tried !portsentry *.* /var/log/portsentry In syslog.conf - still get spam in messages as well... One option I had though of was to recompile portsentry to use one of the local?.info facalitys from syslog(3) i would rather fix this in syslog.conf if possible though. A cc to me on replies would be apreciated as well Thanks in advance G-der gder@gder.net aka Gene Dinkey To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message