From owner-freebsd-questions@FreeBSD.ORG Fri Jun 25 13:34:56 2004 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 048F816A4CE for ; Fri, 25 Jun 2004 13:34:56 +0000 (GMT) Received: from mail02.infosat.net (mailout06.infosat.net [66.18.69.6]) by mx1.FreeBSD.org (Postfix) with ESMTP id 6515543D1F for ; Fri, 25 Jun 2004 13:34:53 +0000 (GMT) (envelope-from blygar1@webmail.co.za) Received: from [66.18.70.48] (HELO mail01.infosat.net) by mail02.infosat.net (CommuniGate Pro SMTP 4.1.8) with ESMTP id 82703007 for freebsd-questions@freebsd.org; Fri, 25 Jun 2004 15:34:47 +0200 Received: from [196.31.69.30] (account blygar1@webmail.co.za) by mail01.infosat.net (CommuniGate Pro WebUser 4.1.8) with HTTP id 350382388 for freebsd-questions@freebsd.org; Fri, 25 Jun 2004 15:34:47 +0200 From: "Gareth Bailey" To: freebsd-questions@freebsd.org X-Mailer: CommuniGate Pro WebUser Interface v.4.1.8 Date: Fri, 25 Jun 2004 15:34:47 +0200 Message-ID: In-Reply-To: <20040625132441.GA22725@lb.tenfour> MIME-Version: 1.0 Content-Type: text/plain; charset="ISO-8859-1" Content-Transfer-Encoding: 8bit Subject: Re: Ipmon & security log rotation X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 25 Jun 2004 13:34:56 -0000 Thanks Dick, Giving ipmon -Ds flags and directing messages to the security file using local0.* seems to be the answer. Specifying a pid file in newsyslog.conf gave errors about not being able to HUP ipmon. Cheers, Gareth On Fri, 25 Jun 2004 14:24:41 +0100 Dick Davies wrote: > You need to either tell newsyslog the pidfile, so it can > HUP > ipmon, or just get it to use syslog (in which case > newsyslog > doesn't need to HUP it at all). > > * Gareth Bailey [0616 14:16]: > > The -D flag tells it to run as daemon. Starting ipmon > with > > ipmon_flags="-D /var/log/security" in rc.conf works > fine. > > It logs to security as required. The problem comes in > when > > the /var/log/security file is rotated by newsyslog. > After > > this occurs, logging stop all together even though > ipmon is > > still running! > > > > Thanks > > Gareth > > > > On Fri, 25 Jun 2004 08:52:40 -0400 > > "JJB" wrote: > > > If you are saying that you have "/sbin/ipmon -D > > > /var/log/security" > > > on the rc.conf statement, then you are telling it to > do 2 > > > conflicting things. The /var/log/security part needs > to > > > be removed. > > > It's telling ipmon to use manual log file after you > tell > > > with -d to > > > use syslog log function. > > > > > > -----Original Message----- > > > From: owner-freebsd-questions@freebsd.org > > > [mailto:owner-freebsd-questions@freebsd.org]On Behalf > Of > > > Gareth > > > Bailey > > > Sent: Friday, June 25, 2004 8:16 AM > > > To: freebsd-questions@freebsd.org > > > Subject: Ipmon & security log rotation > > > > > > I start ipmon at boot time with "/sbin/ipmon -D > > > /var/log/security". Ipmon works fine but seems to > stop > > > logging entries to the security logfile when it is > > > rotated. > > > > > > newsyslog.conf sets mode to 700, which should be fine > > > since > > > ipmon is run as root (i think?) > > > > > > How could i correct this? > > > > > > Thanks > > > Gareth > > > > > > ____________________________________________________________________ > > > _ > > > For super low premiums ,click here > > > http://www.dialdirect.co.za/quote > > > _______________________________________________ > > > freebsd-questions@freebsd.org mailing list > > > > > > http://lists.freebsd.org/mailman/listinfo/freebsd-questions > > > To unsubscribe, send any mail to > > > "freebsd-questions-unsubscribe@freebsd.org" > > > > > > > > _____________________________________________________________________ > > For super low premiums ,click here > http://www.dialdirect.co.za/quote > > _______________________________________________ > > freebsd-questions@freebsd.org mailing list > > > http://lists.freebsd.org/mailman/listinfo/freebsd-questions > > To unsubscribe, send any mail to > "freebsd-questions-unsubscribe@freebsd.org" > > > > -- > A straw vote only shows which way the hot air blows. > -- O'Henry > Rasputin :: Jack of All Trades - Master of Nuns _____________________________________________________________________ For super low premiums ,click here http://www.dialdirect.co.za/quote