Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 31 Dec 2002 08:58:55 -0800
From:      "Drew Tomlinson" <drew@mykitchentable.net>
To:        "David Dooley" <dpd@raffles-it.com>, <questions@FreeBSD.ORG>
Subject:   Re: Using syslog to seperate out log messages
Message-ID:  <009b01c2b0ed$e75f10a0$0301a8c0@bigdaddy>
References:  <20021231001837.2d75937b.dpd@raffles-it.com>

next in thread | previous in thread | raw e-mail | index | archive | help
----- Original Message -----
 From: "David Dooley" dpd@raffles-it.com
To: <questions@FreeBSD.ORG>
Sent: Monday, December 30, 2002 4:18 PM
Subject: Using syslog to seperate out log messages

> Hi,
>
> I have a small problem, well more of an annoyance than anything, but I was
> > hoping that someone would be able to solve it for me.

> I have an Internet connection from Demon in the UK and I am using a D-Link
> DSL-300G+ ADSL modem to connect via. This device uses DHCP to request the
> network configuration from Demon and then offers it via DHCP to my
firewall
> system. This all work fine and I am now in the process of securing the
link
> with ipfw.
>
> Now it would appear the the D-Link box advertises the connection
information
> to the firewall every 30 seconds or so with the following entries
>
> Dec 31 00:07:21 gate dhclient: New Network Number: 62.49.18.0
> Dec 31 00:07:21 gate dhclient: New Broadcast Address: 62.49.18.255
> Dec 31 00:07:50 gate dhclient: New Network Number: 62.49.18.0
> Dec 31 00:07:50 gate dhclient: New Broadcast Address: 62.49.18.255
> Dec 31 00:08:19 gate dhclient: New Network Number: 62.49.18.0
> Dec 31 00:08:19 gate dhclient: New Broadcast Address: 62.49.18.255
>
> as you can see I get quite a lot of this rubbish in the 'messages' file
and I
> would like to move all the dhclient traffic into another log file that I
can
> truncate/remove/ignore on a regular basis.
>
> When I try and direct the above entries with a line like
>
>  !+dhclient
>  *.*   /var/log/dhclient.log
> or
>  !dhclient
>  *.*   /var/log/dhclient.log
> or
>  !-dhclient
>  *.*   /var/log/dhclient.log

> The above traffic still occurs but now I get the following additional
messages
> every 30 seconds or so in the new file
>
> Dec 31 00:06:53 gate dhclient: DHCPREQUEST on fxp0 to 62.49.18.138 port 67
> Dec 31 00:06:53 gate dhclient: DHCPACK from 62.49.18.138
> Dec 31 00:06:53 gate dhclient: New Network Number: 62.49.18.0
> Dec 31 00:06:53 gate dhclient: New Broadcast Address: 62.49.18.255
> Dec 31 00:06:53 gate dhclient: bound to 62.49.18.137 -- renewal in 28
seconds.
>
> Can any one tell me how to stop these messages in the 'messages' file?

I'm no expert but I think the messages may be coming from the 'user'
facility.  I have a router that I capture log messages from and had to put
'user.none' in the line for /var/log/messages to get rid of the traffic.
Then I had a line further down that grabbed all messages from my router and
directed them to another file.

HTH,

Drew

>
> Thanks for your time
>
> David


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?009b01c2b0ed$e75f10a0$0301a8c0>