Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 5 Sep 2005 08:26:30 +0100
From:      "Greg Hennessy" <Greg.Hennessy@nviz.net>
To:        <freebsd-pf@freebsd.org>
Subject:   RE: logging to another machine
Message-ID:  <20050905072630.664053A@gw2.local.net>
In-Reply-To: <431BD7AA.4040300@errno.com>

next in thread | previous in thread | raw e-mail | index | archive | help

 
> 
> tcpdump -i pflog0 -n -e -ttt | logger -p local7.info -h sysloghost
> 
> but that didn't work for some reason. 

Add the '-l' flag to tcpdump and it will. 

~ # ps axww | egrep 'tcpdump|logger'
  428 con- S      0:02.70 tcpdump -s 96 -l -e -t -i pflog0
  429 con- S      0:00.30 logger -p local0.info -t pf

> Regardless it'd be 
> nice to have something less klunky and with less overhead.

It would :-), but it's the best I've found for logging pf to syslog. 


Greg








Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20050905072630.664053A>