Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 22 Mar 2005 23:37:40 +0100
From:      Hexren <me@hexren.net>
To:        Anon <goatse@Phreaker.net>
Cc:        freebsd-newbies@freebsd.org
Subject:   Re[2]: 2 newb questions
Message-ID:  <8922621387.20050322233740@hexren.net>
In-Reply-To: <42409D22.7080902@Phreaker.net>
References:  <424089C0.10902@Phreaker.net> <6e01203b050322134229620d59@mail.gmail.com> <3419921896.20050322225241@hexren.net> <42409D22.7080902@Phreaker.net>

next in thread | previous in thread | raw e-mail | index | archive | help
> Hexren wrote:

>>>Check out freshports.org for the information on ports.  It contains
>>>everything you want and gives pretty simple instructions.
>>>    
>>>
>>
>>  
>>
>>>I couldn't tell you about the logs but I am sure someone will.
>>>    
>>>
>>
>>
>>  
>>
>>>On Tue, 22 Mar 2005 22:10:24 +0100, Anon <goatse@phreaker.net> wrote:
>>>    
>>>
>>>>Hi im running freebsd 5.3 and I have some questions:
>>>>
>>>>1. how do I log ssh login attempts to a file? say /var/log/auth I have
>>>>read syslogd man page and I dont get it at all
>>>>
>>>>2. how do I get some kind of a system that "warns" me when a port is old
>>>>(there is a new in cvs database), example: I want to get an email when a
>>>>new version of the port "firefox" comes out
>>>>
>>>>Thank you in advance for the answers!
>>>>      
>>>>
>>
>>---------------------------------------------
>>
>>My feeling is that the default install already logs everything that
>>has to do with auth to /var/log/auth.log.
>>This
>>"auth.info;authpriv.info                         /var/log/auth.log"
>>line in /etc/syslog conf defines to where that login information is
>>sent.
>>
>>Hexren
>>
>>
>>  
>>
> dear hexren,

> it seems as it only logs local connections
> not su's (I wanna loog that too)
> but only local logins as root!

---------------------------------------------

I don't know if you can costumize the loging so much. In your position
I would write a script to analyze the log files and pipe the syslog
output through that script.
"auth.info;authpriv.info                         | analyze.pl"
I am not shure if the syntax is correct read man syslog.

Hexren



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?8922621387.20050322233740>