From owner-freebsd-security Sat Oct 17 23:11:52 1998 Return-Path: Received: (from majordom@localhost) by hub.freebsd.org (8.8.8/8.8.8) id XAA12892 for freebsd-security-outgoing; Sat, 17 Oct 1998 23:11:52 -0700 (PDT) (envelope-from owner-freebsd-security@FreeBSD.ORG) Received: from peak.mountin.net (peak.mountin.net [207.227.119.2]) by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id XAA12887 for ; Sat, 17 Oct 1998 23:11:50 -0700 (PDT) (envelope-from jeff-ml@mountin.net) Received: (from daemon@localhost) by peak.mountin.net (8.9.1/8.9.1) id BAA19229; Sun, 18 Oct 1998 01:11:20 -0500 (CDT) Received: from harkol-105.isdn.mke.execpc.com(169.207.64.233) by peak.mountin.net via smap (V1.3) id sma019227; Sun Oct 18 01:10:57 1998 Message-Id: <3.0.3.32.19981018011033.00fc17e8@207.227.119.2> X-Sender: jeff-ml@207.227.119.2 X-Mailer: QUALCOMM Windows Eudora Pro Version 3.0.3 (32) Date: Sun, 18 Oct 1998 01:10:33 -0500 To: "Jan B. Koum " , Sheldon Hearn , Igor Roshchin From: "Jeffrey J. Mountin" Subject: Re: syslogd and syslog.conf (new feature) Cc: security@FreeBSD.ORG In-Reply-To: <19981017134231.C22818@best.com> References: <199810171855.NAA18114@set.spradley.tmi.net> Mime-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org At 01:42 PM 10/17/98 -0700, Jan B. Koum wrote: > Hate to be the party pooper here, but when people will learn to > trim -security (and -stable also in this case) from threads which > really should be on -chat? > Agreed. One last thought about syslogd. If you consider the default setup for syslog.conf and the fact that *most* messages are going to one logfile, which can get messy and difficult to discern the important from the routine. With that in mind why not have the LEVEL after the FACILITY in the log? []: : Programs like ssh and Apache do something along this line. Certainly would make it easy to search/grep the logs for things demanding more notice than usual. Not to mention if you want to pipe your syslog through a script it provides another common point for comparison. A better feature/improvement (for my usage) than having something to remind me about spaces and or ignore them (neither applies). Jeff Mountin - Unix Systems TCP/IP networking jeff@mountin.net To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message