From owner-freebsd-security  Wed Oct 14 08:27:11 1998
Return-Path: <owner-freebsd-security@FreeBSD.ORG>
Received: (from majordom@localhost)
          by hub.freebsd.org (8.8.8/8.8.8) id IAA06639
          for freebsd-security-outgoing; Wed, 14 Oct 1998 08:27:11 -0700 (PDT)
          (envelope-from owner-freebsd-security@FreeBSD.ORG)
Received: from ns1.seidata.com (ns1.seidata.com [208.10.211.2])
          by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id IAA06630
          for <freebsd-security@FreeBSD.ORG>; Wed, 14 Oct 1998 08:27:06 -0700 (PDT)
          (envelope-from mike@seidata.com)
From: mike@seidata.com
Received: from localhost (mike@localhost)
	by ns1.seidata.com (8.8.8/8.8.5) with ESMTP id LAA18932;
	Wed, 14 Oct 1998 11:26:24 -0400 (EDT)
Date: Wed, 14 Oct 1998 11:26:24 -0400 (EDT)
To: "N. N.M" <madrapour@hotmail.com>
cc: freebsd-security@FreeBSD.ORG
Subject: Re: Again logging! 
In-Reply-To: <19981014142006.22104.qmail@hotmail.com>
Message-ID: <Pine.BSF.4.05.9810141120260.16462-100000@ns1.seidata.com>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
Sender: owner-freebsd-security@FreeBSD.ORG
Precedence: bulk
X-Loop: FreeBSD.org

On Wed, 14 Oct 1998, N. N.M wrote:

> 1- I installed TCP Wrapper in the way that I moved the real daemons to 
> another directory and copied "tcpd" instead of real daemons. I don't 
> know how I can get it's logs. I add a line to log the messages from 
> "tcpd" to a file. But it didn't work.

Default install dumps to /var/log/messages for me - what do you mean
by 'get it's logs'?

> 2- I don't know the difference between running  "inetd" with switch "-l" 
> and without it. 

Assuming 'man inetd' is correct:

"When given the -l option inetd will log an entry to syslog each time
an accept(2) is made, which notes the service selected and the
IP-number of the remote requestor."

> 3- Will it affect the system performance if I activate the logging of 
> TCP and UDP connections by setting the following kernel variables?:
> net.inet.tcp.log_in_vain=1
> net.inet.udp.log_in_vain=1

Not sure, I don't do this.  First guess would be, "Yes."  I'm sure
others here will have definate answers for this.

Later,

	-mike


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message