From owner-freebsd-questions@FreeBSD.ORG  Tue Feb 22 17:56:14 2005
Return-Path: <owner-freebsd-questions@FreeBSD.ORG>
Delivered-To: freebsd-questions@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id 7497216A4CF
	for <questions@freebsd.org>; Tue, 22 Feb 2005 17:56:14 +0000 (GMT)
Received: from tomts20-srv.bellnexxia.net (tomts20.bellnexxia.net
	[209.226.175.74])
	by mx1.FreeBSD.org (Postfix) with ESMTP id B7F2643D1D
	for <questions@freebsd.org>; Tue, 22 Feb 2005 17:56:13 +0000 (GMT)
	(envelope-from james.cook@utoronto.ca)
Received: from angel.falsifian.afraid.org ([65.95.228.66])
	by tomts20-srv.bellnexxia.netSMTP
	<20050222175612.NHBI2034.tomts20-srv.bellnexxia.net@angel.falsifian.afraid.org>;
	Tue, 22 Feb 2005 12:56:12 -0500
Received: by angel.falsifian.afraid.org (sSMTP sendmail emulation);
	Tue, 22 Feb 2005 12:58:27 -0500
Date: Tue, 22 Feb 2005 12:58:27 -0500
From: James Alexander Cook <james.cook@utoronto.ca>
To: David Banning <david+dated+1109486127.c1b9c8@skytracker.ca>
Message-ID: <20050222175827.GA36707@angel.falsifian.afraid.org>
References: <20050222063525.GA4636@skytracker.ca>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <20050222063525.GA4636@skytracker.ca>
User-Agent: Mutt/1.4.2.1i
cc: questions@freebsd.org
Subject: Re: logging proftpd question
X-BeenThere: freebsd-questions@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: User questions <freebsd-questions.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>,
	<mailto:freebsd-questions-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-questions>
List-Post: <mailto:freebsd-questions@freebsd.org>
List-Help: <mailto:freebsd-questions-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>,
	<mailto:freebsd-questions-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Tue, 22 Feb 2005 17:56:14 -0000

On Tue, Feb 22, 2005 at 01:35:25AM -0500, David Banning wrote:
> Presently all my proftpd logging goes to /var/log/messages but
> it is clogging that file because I have an ftp login every couple of
> minutes. I want to redirect proftpd logging. I tried putting 
> 
> proftpd:* 				/var/log/proftpd.log
> 
> in my /etc/syslog.conf
> 
> but syslogd complains;
> syslogd: unknown facility name "proftpd"
> 
> looking at the man page for proftpd is says;
> 
> Each successful and failed ftp(1) session is logged using syslog with a
> facility of LOG_FTP.  Note: LOG_FTP messages are not displayed by  sys-
> logd(8) by default, and may have to be enabled in syslogd(8)'s configu-
> ration file.
> 
> 
> So I tried;
> 
> LOG_FTP:*				/var/log/proftpd.log
> 
> still no go.
> 
> I am unfamiliar with logging. Can someone help me along here?
> 
> -- 

$ man syslog.conf
<snip>
     The facility describes the part of the system generating the message, and
     is one of the following keywords: auth, authpriv, console, cron, daemon,
     ftp, kern, lpr, mail, mark, news, ntp, security, syslog, user, uucp and
     local0 through local7.  These keywords (with the exception of mark) cor-
     respond to similar ``LOG_'' values specified to the openlog(3) and
     syslog(3) library routines.
<snip>

I believe the syntax you want is

ftp.*			/var/log/proftpd.log

Make sure the logfile exists (and is writable),
otherwise I think syslog will complain.

- James Cook
  james.cook@utoronto.ca