Log question

[Ryan Walker]

Hi folks..

I am running a 2.6 box and using ipfw. I had logging working perfectly,
and while I was testing something I deleted /var/log/ipfw (on purpose, I
assumed it would re-create itself.) It didn't, and now that log doesn't
exist.. (Well the info gets dumped to /va/log/messages too, but I'd like
it separate.)

I tried recreating the file w/the same permissions as some other log
files, and it does't take..

Any thoughts? I'm sure it's something fairly silly ..

Ryan

[Jesus Oquendo]

Well you would edit /etc/syslog.conf and add another entry for the logging
you would want it to parse to. For example I have kernel errors stdout to
/var/log/critical, my snort output goes to /var/log/moronicy as well as a
few other tweaks here and there.

As for the reason your logging isn't going anywhere, its probably because
/etc/security replaced the changes on your files in /var/backup or so.

If I'm not mistaken though IPF prints out to /var/log/ipflog well at least
on my machine it does.

Hope that helped a bit.
_________________,,,__ o,0 __,,,_____________
Jesus Oquendo
je...@starmedia.net || 124...@skytel.com
Network Operations Engineer, Network Operations
StarMedia Networks INC.
http://www.starmedia.com
(p) (212) 520-6341 (f) (212) 548-9654

ID 0x1281EC4F
DH/DSS
4096/1024
CIPHER: CAST
PGP Fingerprint
46C0 6A83 E6D2 FEA6 383A B9A6 44D3 4E77 1281 EC4F

"OpenBSD -- Where you should've been yesterday."

[Ryan Walker]

HI Jesus,

That for the advice -- actually I think I was mistaken, and the file in
question was ipflog, and not ipfw as I have stated.. I'm going to sit
down and take a look at my syslog.conf file -- I know nothing about
syslog, and it's probably time I learned.

Thanks again.

Ryan