From owner-freebsd-questions@FreeBSD.ORG Thu Nov 8 14:42:01 2007 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id E6F0716A468 for ; Thu, 8 Nov 2007 14:42:01 +0000 (UTC) (envelope-from david.robillard@gmail.com) Received: from rv-out-0910.google.com (rv-out-0910.google.com [209.85.198.191]) by mx1.freebsd.org (Postfix) with ESMTP id A69CE13C4A8 for ; Thu, 8 Nov 2007 14:42:01 +0000 (UTC) (envelope-from david.robillard@gmail.com) Received: by rv-out-0910.google.com with SMTP id l15so141643rvb for ; Thu, 08 Nov 2007 06:41:50 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=beta; h=domainkey-signature:received:received:message-id:date:from:to:subject:cc:mime-version:content-type:content-transfer-encoding:content-disposition; bh=1SjyspIVceunYBuctoeQiAh+DvD68PMI+6Q9v4clZZc=; b=q4skOy0iirFkFZHrgL35RoZ6Vr4jOI+JEZPnpJf2gKogHpvUIzSPFrh1SYskiUbRQ0Rzr4SX/YnF9hV8eL6a7iS98GHo9I7Trj6dWkHjcvO84yp9gxnObYpgC2UknIoW4NEbo2agFzduk1udUWgL5JBQYtdbL/CzFLyQ+TiHbxY= DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=beta; h=received:message-id:date:from:to:subject:cc:mime-version:content-type:content-transfer-encoding:content-disposition; b=cWI7tpzDdGHGicVZzZUECTHl5FJRw+lEGLAi1XDkR/44puKwGwhDbZF+lr1s4EL0N4zAiVuWBpxiuexQvWuAxcJAWmGRIMemPOG0zqVWAFwFdtdbTIwIiyuO8GbRhovqnDl927r4TZxZV8GnPP96cbjd06NLEDe1WOqFRZz7FX0= Received: by 10.141.204.16 with SMTP id g16mr267455rvq.1194532910789; Thu, 08 Nov 2007 06:41:50 -0800 (PST) Received: by 10.140.203.6 with HTTP; Thu, 8 Nov 2007 06:41:50 -0800 (PST) Message-ID: <226ae0c60711080641p1a614827l5c9a85e795a9d21e@mail.gmail.com> Date: Thu, 8 Nov 2007 09:41:50 -0500 From: "David Robillard" To: "FreeBSD Questions" MIME-Version: 1.0 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit Content-Disposition: inline Cc: Subject: Re: syslog time resolution X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 08 Nov 2007 14:42:02 -0000 > I would like to increase the number of decimals reported in logfiles by > syslogd(8), anyone knows if it is possible and perhaps a hint on how to do > it? > > tcpdump for instance, has six decimals: 21:25:20.160833 whereas the > standard syslog has zero decimal secs. > > I am only referring to events within a single system so it's not related to > clock accuracy. > > Thanks and sorry if I missed the obvious! You might want to try changing the base system's syslogd(8) for a more feature rich syslog solution. I'd suggest using syslog-ng which is available in the FreeBSD ports as sysutils/syslog-ng2 http://www.freebsd.org/cgi/url.cgi?ports/sysutils/syslog-ng2/pkg-descr It has quite a lot more features then the base system's syslogd(8) as you can see from the online Administrator's Guide http://www.balabit.com/dl/html/syslog-ng-admin-guide_en.html/bk01-toc.html Should you like to check out other syslogd replacements, check the Library at http://www.loganalysis.org/ Have fun! David -- David Robillard UNIX systems administrator & Oracle DBA CISSP, RHCE & Sun Certified Security Administrator Montreal: +1 514 966 0122