From owner-freebsd-security  Sun Sep 23 10: 3:43 2001
Delivered-To: freebsd-security@freebsd.org
Received: from webs1.accretive-networks.net (webs1.accretive-networks.net [207.246.154.13])
	by hub.freebsd.org (Postfix) with ESMTP id 8B6F537B41D
	for <security@FreeBSD.ORG>; Sun, 23 Sep 2001 10:03:34 -0700 (PDT)
Received: from localhost (davidk@localhost)
	by webs1.accretive-networks.net (8.11.1/8.11.3) with ESMTP id f8NFxOb41401;
	Sun, 23 Sep 2001 08:59:24 -0700 (PDT)
Date: Sun, 23 Sep 2001 08:59:24 -0700 (PDT)
From: David Kirchner <davidk@accretivetg.com>
X-X-Sender:  <davidk@localhost>
To: Ian Smith <smithi@nimnet.asn.au>
Cc: David G Andersen <danderse@cs.utah.edu>,
	Chris Byrnes <chris@JEAH.net>, <security@FreeBSD.ORG>
Subject: Re: New worm protection
In-Reply-To: <Pine.BSF.3.96.1010924022816.9322B-100000@gaia.nimnet.asn.au>
Message-ID: <20010923085802.C85958-100000@localhost>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
Sender: owner-freebsd-security@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-security.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-security>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-security>
X-Loop: FreeBSD.org

On Mon, 24 Sep 2001, Ian Smith wrote:

> Not an option here, but it's the large number of entries in *-error.log
> that I'd like to be rid of.  *-access.log I can just grep out before log
> analysis, if not exclude in the analyser config.

The method that was mentioned would also work for ErrorLog:

ErrorLog "|grep -v cmd.exe > /normal/error_log/location"


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message