From owner-freebsd-questions Thu Nov 15 12:52:24 2001 Delivered-To: freebsd-questions@freebsd.org Received: from mtiwmhc24.worldnet.att.net (mtiwmhc24.worldnet.att.net [204.127.131.49]) by hub.freebsd.org (Postfix) with ESMTP id CFF8E37B41B for ; Thu, 15 Nov 2001 12:52:18 -0800 (PST) Received: from columbia ([12.93.212.237]) by mtiwmhc24.worldnet.att.net (InterMail vM.4.01.03.27 201-229-121-127-20010626) with SMTP id <20011115205217.YWLI19017.mtiwmhc24.worldnet.att.net@columbia>; Thu, 15 Nov 2001 20:52:17 +0000 From: "Andrew C. Hornback" To: , Subject: RE: syslog dedicated machine Date: Thu, 15 Nov 2001 15:51:56 -0500 Message-ID: <007801c16e17$5d2518e0$6600000a@ach.domain> MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: 7bit X-Priority: 3 (Normal) X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook 8.5, Build 4.71.2173.0 X-MIMEOLE: Produced By Microsoft MimeOLE V5.00.2919.6600 In-Reply-To: <200111151447.AA2516975816@florida-wireless.com> Importance: Normal Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.ORG > -----Original Message----- > From: owner-freebsd-questions@FreeBSD.ORG > [mailto:owner-freebsd-questions@FreeBSD.ORG]On Behalf Of brain_damaged > Sent: Thursday, November 15, 2001 2:47 PM > To: freebsd-questions@freebsd.org > Subject: syslog dedicated machine > > Hello Anyone, > after reading the security page I am thinking of > putting it like it said with one machine doing just the logging. > I was wondering what the machine requirements would be for just > running the syslogd ? I dunno... I don't think that syslogd would put too much of a strain on the hardware, as all it's basically doing is taking system messages and throwing them into a log file. > Alot of hard space I would imagine but would a alot of memory and > process be needed ? Shouldn't be. > I have a p-100 sitting here with two big drives but It doesn't > have much memory. 16 megs I think. That should work fine, depending on the size of your network. You'd also want to have a NIC in that machine to match the fastest NIC on your LAN to prevent collisions and network bottlenecking at the syslogd server. > also what would happen if the syslog machine was down and the > others could not talk to it. > I have two postfix machines and one machine running > apahce,mysql,php,phpnuke ? > would they lockup or stop functioning ? Not sure, but I think it would be similar to those programs sending their syslog information to /dev/null. They'd still run, but you wouldn't get any logging info or debugging info. --- Andy To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message