From owner-freebsd-questions Mon Feb 12 22:55:24 2001 Delivered-To: freebsd-questions@freebsd.org Received: from mailhost01.reflexnet.net (mailhost01.reflexnet.net [64.6.192.82]) by hub.freebsd.org (Postfix) with ESMTP id 9E4FF37B491 for ; Mon, 12 Feb 2001 22:55:20 -0800 (PST) Received: from rfx-216-196-73-168.users.reflexcom.com ([216.196.73.168]) by mailhost01.reflexnet.net with Microsoft SMTPSVC(5.5.1877.197.19); Mon, 12 Feb 2001 22:53:21 -0800 Received: (from cjc@localhost) by rfx-216-196-73-168.users.reflexcom.com (8.11.1/8.11.1) id f1D6tCT49764; Mon, 12 Feb 2001 22:55:12 -0800 (PST) (envelope-from cjc) Date: Mon, 12 Feb 2001 22:55:10 -0800 From: "Crist J. Clark" To: G-der Cc: freebsd-questions@FreeBSD.ORG Subject: Re: syslog.conf - duplicate entries in logs Message-ID: <20010212225510.L62368@rfx-216-196-73-168.users.reflex> Reply-To: cjclark@alum.mit.edu References: <20010212202638.A52861@gder.net> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline User-Agent: Mutt/1.2.5i In-Reply-To: <20010212202638.A52861@gder.net>; from gder@gder.net on Mon, Feb 12, 2001 at 08:26:38PM -0700 Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG On Mon, Feb 12, 2001 at 08:26:38PM -0700, G-der wrote: > I installed portsentry and didn't like all the spam I was getting in > messages. portsentry sends messages to syslogd using daemon.notice so I > put the folowing line in my syslog.conf file. > > daemon.notice /var/log/portsentry > > After a few tests I see that connection attempts are logged not only in > /var/log/portsentry but also in messages as well. > > A few lines above my entry is: > > *.notice;kern.debug;lpr.info;mail.crit;news.err /var/log/messages > > Notice the *.notice. I was wondering how I might be able to safely > change this so that I can seperate my portsentry entries from the rest > of the *.notice entries. *.notice;kern.debug;lpr.info;mail.crit;news.err;daemon.warning /var/log/messages ^^^^^^^^^^^^^^ Elevating the level at which daemon messages are logged to messges might help, no? Or even 'daemon.none' to kill them all? -- Crist J. Clark cjclark@alum.mit.edu To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message