From owner-freebsd-security  Fri Jun 27 07:51:39 1997
Return-Path: <owner-security>
Received: (from root@localhost)
          by hub.freebsd.org (8.8.5/8.8.5) id HAA24678
          for security-outgoing; Fri, 27 Jun 1997 07:51:39 -0700 (PDT)
Received: from ns2.harborcom.net (root@ns2.harborcom.net [206.158.4.4])
          by hub.freebsd.org (8.8.5/8.8.5) with ESMTP id HAA24671
          for <freebsd-security@FreeBSD.ORG>; Fri, 27 Jun 1997 07:51:37 -0700 (PDT)
Received: from localhost (bradley@localhost)
	by ns2.harborcom.net (8.8.5/8.8.5) with SMTP id KAA06867;
	Fri, 27 Jun 1997 10:51:25 -0400 (EDT)
Date: Fri, 27 Jun 1997 10:51:25 -0400 (EDT)
From: Bradley Dunn <bradley@dunn.org>
X-Sender: bradley@ns2.harborcom.net
To: Nathan Dorfman <nathan@senate.org>
cc: freebsd-security@FreeBSD.ORG
Subject: Re: ICMP Logging
In-Reply-To: <199706271343.JAA04122@limbo.senate.org>
Message-ID: <Pine.BSF.3.96.970627104935.110A-100000@ns2.harborcom.net>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
Sender: owner-security@FreeBSD.ORG
X-Loop: FreeBSD.org
Precedence: bulk

On Fri, 27 Jun 1997, Nathan Dorfman wrote:

> Is there a way for the kernel to syslog(3) all ICMP messages? This would serve

IPFW will let you log any type of traffic you want. Check out the section
in the handbook about it:
http://www.freebsd.org/handbook/handbook72.html

pbd
--
You can make it illegal, but you can't make it unpopular.