Skip site navigation (1)Skip section navigation (2)
Date:      Sun, 04 Sep 2005 22:29:14 -0700
From:      Sam Leffler <sam@errno.com>
To:        freebsd-pf@freebsd.org
Subject:   logging to another machine
Message-ID:  <431BD7AA.4040300@errno.com>

next in thread | raw e-mail | index | archive | help

I'm converting an ipfw-based firewall to pf.  The firewall runs on a 
soekris where there's little space.  I currently redirect ipfw log msgs 
via syslog to another machine.  Is there a similar way to do this with 
pf?  I'm not keen on accumulating stuff to the memory disk and flushing 
it periodically because that leaves me open to losing stuff and also 
requires I run cron or something similar on the firewall.

In lieu of something intelligent I tried using logger and tcpdump with 
something like:

tcpdump -i pflog0 -n -e -ttt | logger -p local7.info -h sysloghost

but that didn't work for some reason.  Regardless it'd be nice to have 
something less klunky and with less overhead.

	Sam



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?431BD7AA.4040300>