From owner-freebsd-questions@FreeBSD.ORG Wed May 12 05:54:11 2004 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 8C93116A4CE for ; Wed, 12 May 2004 05:54:11 -0700 (PDT) Received: from sccrmhc12.comcast.net (sccrmhc12.comcast.net [204.127.202.56]) by mx1.FreeBSD.org (Postfix) with ESMTP id A89A443D4C for ; Wed, 12 May 2004 05:54:10 -0700 (PDT) (envelope-from freebsd-questions-local@be-well.ilk.org) Received: from be-well.no-ip.com ([66.30.196.44]) by comcast.net (sccrmhc12) with ESMTP id <2004051212540801200rl020e>; Wed, 12 May 2004 12:54:08 +0000 Received: by be-well.no-ip.com (Postfix, from userid 1147) id 6ADA32B; Wed, 12 May 2004 08:54:08 -0400 (EDT) Sender: lowell@be-well.ilk.org To: Barbish3@adelphia.net References: From: Lowell Gilbert Date: 12 May 2004 08:54:08 -0400 In-Reply-To: Message-ID: <44isf1x0un.fsf@be-well.ilk.org> Lines: 28 User-Agent: Gnus/5.09 (Gnus v5.9.0) Emacs/21.3 MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii cc: "freebsd-questions@FreeBSD. ORG" Subject: Re: Force newsyslog to rotate from custon script X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 12 May 2004 12:54:11 -0000 "JJB" writes: > Problem description: My ipfilter log is rotated using > newsyslog.conf. The file is rotated on file size option. I have > custom script that reads the log and builds email containing list of > abusive source IP address. This custom script is included in the > daily management report process. Problem is that on days that there > is a lot of blocked traffic the log may rotate multiple times and my > daily management report script only runs against the current active > log. > > Is their some way to keep the log defined in newsyslog.conf without > any rotate option and add something to my custom script to tell > newsyslog to rotate the log after the script has processed the > current active log file? I would recommend a slightly different approach. Either of a couple of different approaches, in fact... One way to do this would be to use a separate config file for newsyslog(8) rather than /etc/newsyslog.conf. Then you run newsyslog and use the -f option to have it use your special-purpose configuration just for rotating this ipfilter log. The other way would be to do the rotation directly, in your script which processes the file. It should only take three or four commands in the script. That would let you more or less eliminate any race conditions that might leave data out of your logs.