From owner-freebsd-questions Tue Aug 20 13:32:28 2002 Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.FreeBSD.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 185E337B400 for ; Tue, 20 Aug 2002 13:32:23 -0700 (PDT) Received: from leviathan.inethouston.net (leviathan.inethouston.net [66.64.12.249]) by mx1.FreeBSD.org (Postfix) with ESMTP id 7FE0D43E3B for ; Tue, 20 Aug 2002 13:32:22 -0700 (PDT) (envelope-from mike@inethouston.net) Received: from desecrate (daimon [24.216.142.134]) by leviathan.inethouston.net (Postfix) with ESMTP id 8266B3198FC for ; Tue, 20 Aug 2002 15:32:25 -0500 (CDT) Message-ID: <001901c24888$b4012040$0f04a8c0@desecrate> From: "Michael J. Turner" To: Subject: IPMON Date: Tue, 20 Aug 2002 15:32:28 -0500 MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="----=_NextPart_000_0016_01C2485E.CA6F1B40" X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express 6.00.2600.0000 X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000 Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.ORG This is a multi-part message in MIME format. ------=_NextPart_000_0016_01C2485E.CA6F1B40 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable Hi im trying to get ipmon to start logging. Im running 4.5-STABLE FreeBSD.=20 I have ipf in my kernel via options IPFILTER #ipfilter support options IPFILTER_LOG #ipfilter logging and i have it enabled via enable_ipmon=3D"YES" in syslog.conf i have Local0.* /var/log/ipf.log Local1.* /var/log/ipf.log security.* /var/log/ipf.log The file ipf.log does exisit in /var/log. I've tried killing syslogd and all sorts of stuff. Im even loging things such as AIM, port 80, and my denys, which should make a big log fast. Yet i havent seen a log yet. Any ideas? ------=_NextPart_000_0016_01C2485E.CA6F1B40 Content-Type: text/html; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable

Hi im trying to get ipmon to start = logging. Im=20 running

4.5-STABLE FreeBSD.

I have ipf in my kernel = via

options =20 IPFILTER = ; =20 #ipfilter = support
options =20 IPFILTER_LOG #ipfilter=20 logging

and i have it enabled via

enable_ipmon=3D"YES"

in syslog.conf i have

Local0.*         &n= bsp;           &nb= sp;           &nbs= p;     =20 /var/log/ipf.log
Local1.*       &nb= sp;           &nbs= p;            = ;       =20 /var/log/ipf.log
security.*       &= nbsp;           &n= bsp;           &nb= sp;     =20 /var/log/ipf.log

The file ipf.log does exisit in=20 /var/log.

I've tried killing syslogd and all = sorts of=20 stuff.

Im even loging things such as AIM, port = 80,

and my denys, which should make a big = log=20 fast.

Yet i havent seen a log yet. Any=20 ideas?

------=_NextPart_000_0016_01C2485E.CA6F1B40-- To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message