From owner-freebsd-questions@FreeBSD.ORG  Mon Oct  8 14:41:58 2007
Return-Path: <owner-freebsd-questions@FreeBSD.ORG>
Delivered-To: freebsd-questions@freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34])
	by hub.freebsd.org (Postfix) with ESMTP id 7EF6A16A41B
	for <freebsd-questions@freebsd.org>;
	Mon,  8 Oct 2007 14:41:58 +0000 (UTC)
	(envelope-from lists@qwirky.net)
Received: from public.aci.on.ca (mailbox.aci.on.ca [205.207.148.251])
	by mx1.freebsd.org (Postfix) with ESMTP id 2475213C4A7
	for <freebsd-questions@freebsd.org>;
	Mon,  8 Oct 2007 14:41:57 +0000 (UTC)
	(envelope-from lists@qwirky.net)
Received: from (invalid client hostname: host address literal does not match
	remote client address)[127.0.0.1] ((no PTR matching greeting
	name)xtreme-13-162.dyn.aci.on.ca[69.17.172.162] port=1240)
	by public.aci.on.ca([205.207.148.251] port=25)
	via TCP with esmtp (1789 bytes) (sender: <lists@qwirky.net>)
	id <m1IetVl-003RBcC@public.aci.on.ca>
	for <freebsd-questions@freebsd.org>;
	Mon, 8 Oct 2007 10:23:09 -0400 (EDT)
	(Smail-3.2.0.122-Pre 2005-Nov-17 #1 built 2007-Apr-30)
Message-ID: <470A3D96.3000904@qwirky.net>
Date: Mon, 08 Oct 2007 10:24:22 -0400
From: Jeff Royle <lists@qwirky.net>
User-Agent: Thunderbird 2.0.0.6 (Windows/20070728)
MIME-Version: 1.0
To: FreeBSD Questions <freebsd-questions@freebsd.org>
References: <47096FD7.4000309@rowyerboat.com>
In-Reply-To: <47096FD7.4000309@rowyerboat.com>
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
X-Antivirus: avast! (VPS 000779-0, 08/10/2007), Outbound message
X-Antivirus-Status: Clean
Cc: Stephen Allen <sdafreebsduk@rowyerboat.com>
Subject: Re: /var/log/messages filling up with DHCPDISCOVER messages
X-BeenThere: freebsd-questions@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
Reply-To: lists@qwirky.net
List-Id: User questions <freebsd-questions.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
	<mailto:freebsd-questions-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-questions>
List-Post: <mailto:freebsd-questions@freebsd.org>
List-Help: <mailto:freebsd-questions-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
	<mailto:freebsd-questions-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Mon, 08 Oct 2007 14:41:58 -0000

Stephen Allen wrote:
> /usr/local/etc/dhcpd.conf is configured with
> 
>      "log-facility local7;"
> 
> and /etc/syslog.conf is also configured with
> 
>      "local7.*  /var/log/dhcpd.log"
> 
> However, /var/log/messages is filling up with "DHCPDISCOVER / no free
> leases" messages for those clients that are unknown to the DHCP server
> (eg. on a different subnet).  I suspect that these messages are being
> caught by "*.notice" which is why they end up in /var/log/messages.
> 
> Is there a way to prevent this happening?

You could try filtering them out of syslog like so (in your syslogd.conf):

"local7.!=notice  /var/log/dhcpd.log"

Which should log everything for local7 except notice. See man syslog.conf(5)

Cheers,

Jeff Royle
lists dot qwirky dot net