Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 9 Aug 2018 12:01:38 +0200
From:      Ruben <mail@osfux.nl>
To:        freebsd-questions@freebsd.org
Subject:   Re: newsyslogd / pflogd : daily logfiles for pf
Message-ID:  <bbd6e671-4be9-af2e-314e-e1e05644f267@osfux.nl>
In-Reply-To: <58b3ce35-9426-6f00-885f-2dc7fa677ba5@osfux.nl>
References:  <eccc8de1-c418-d564-b75e-21e9b385fdac@osfux.nl> <58b3ce35-9426-6f00-885f-2dc7fa677ba5@osfux.nl>

Next in thread | Previous in thread | Raw E-Mail | Index | Archive | Help
Hi,

Somebody contacted me off-list and provided a lot of knowledge / efforts 
troubleshooting this issue: TnX!

The problem eventually turned out to be (totally) unrelated to both 
newsylog and pflogd, and the issue has been "solved".

Kind regards,

Ruben

On 08/01/2018 12:34 PM, Ruben wrote:
> Hi,
> 
> Anybody out there with a working rotation on /var/log/pflog (using 
> newsyslog) ?
> 
> All help/suggestions welcome!
> 
> Kind regards,
> 
> Ruben
> 
> On 07/30/2018 05:12 PM, Ruben wrote:
>>
>> Hi List,
>>
>>
>> I'm running PF on some FreeBSD 11.x installs and I would very much 
>> like to have daily logfiles containing the entries that land up in the 
>> pflog device. I'm having trouble switching from "max size" rotation to 
>> "once a day, regardless of size" rotation.
>>
>>
>>
>> My pflog entry in /etc/newsyslog.conf looked like this:
>>
>> /var/log/pflog      600  3    100    @T00 JB    /var/run/pflogd.pid
>>
>>
>> and after my attempted change now looks like this:
>>
>> /var/log/pflog      600  30    *    @T00 JB    /var/run/pflogd.pid
>>
>>
>> but no new /var/log/pflog.0.bz2 files are created anymore. If I run 
>> the newsyslog binary manually like this :
>>
>> /usr/sbin/newsyslog -vCF
>>
>> then the /var/log/pflog.* are created / rotated.
>>
>>
>> Could somebody perhaps shed some light on what I'm doing wrong here?
>>
>>
>> Any help appreciated!
>>
>>
>> Kind regards,
>>
>>
>> Ruben
>> _______________________________________________
>> freebsd-questions@freebsd.org mailing list
>> https://lists.freebsd.org/mailman/listinfo/freebsd-questions
>> To unsubscribe, send any mail to 
>> "freebsd-questions-unsubscribe@freebsd.org"
> _______________________________________________
> freebsd-questions@freebsd.org mailing list
> https://lists.freebsd.org/mailman/listinfo/freebsd-questions
> To unsubscribe, send any mail to 
> "freebsd-questions-unsubscribe@freebsd.org"



Want to link to this message? Use this URL: <http://docs.FreeBSD.org/cgi/mid.cgi?bbd6e671-4be9-af2e-314e-e1e05644f267>