From owner-freebsd-questions Sat Mar 2 15: 0:49 2002 Delivered-To: freebsd-questions@freebsd.org Received: from out4.mx.nwbl.wi.voyager.net (out4.mx.nwbl.wi.voyager.net [169.207.1.77]) by hub.freebsd.org (Postfix) with ESMTP id 60C2C37B47E for ; Sat, 2 Mar 2002 14:59:39 -0800 (PST) Received: from shell.core.com (shell.core.com [169.207.1.89]) by out4.mx.nwbl.wi.voyager.net (8.11.1/8.11.4/1.7) with ESMTP id g22MxT558361; Sat, 2 Mar 2002 16:59:29 -0600 (CST) Received: from localhost (raiden@localhost) by shell.core.com (8.11.6/8.11.6/1.3) with ESMTP id g22MxTr19501; Sat, 2 Mar 2002 16:59:29 -0600 (CST) Date: Sat, 2 Mar 2002 16:59:29 -0600 (CST) From: Steven Lake X-X-Sender: raiden@shell.core.com To: ScaryG Cc: Steven Lake , Subject: Re: Logging of "last login" In-Reply-To: <20020302173300.7ce1203e.freymann@scaryg.shacknet.nu> Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.ORG > You may also want to look in /var/log/security (depending on how your > syslog is configured). Ok, this is probubly not a good thing, but my /var/log/security file is empty. Dead empty. syslog.conf looks about as standard as standard gets. Nuts. This is what I got: # $FreeBSD: src/etc/syslog.conf,v 1.13.2.2 2001/02/26 09:26:11 phk Exp $ # # Spaces are NOT valid field separators in this file. # Consult the syslog.conf(5) manpage. *.err;kern.debug;auth.notice;mail.crit /dev/console *.notice;kern.debug;lpr.info;mail.crit;news.err /var/log/messages security.* /var/log/security mail.info /var/log/maillog lpr.info /var/log/lpd-errs cron.* /var/log/cron *.err root *.notice;news.err root *.alert root *.emerg * # uncomment this to log all writes to /dev/console to /var/log/console.log #console.info /var/log/console.log # uncomment this to enable logging of all log messages to /var/log/all.log #*.* /var/log/all.log # uncomment this to enable logging to a remote loghost named loghost #*.* @loghost # uncomment these if you're running inn # news.crit /var/log/news/news.crit # news.err /var/log/news/news.err # news.notice /var/log/news/news.notice !startslip *.* /var/log/slip.log !ppp *.* /var/log/ppp.log Am I missing something, or is something just not logging right? To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message