From owner-freebsd-questions@FreeBSD.ORG Mon May 22 14:15:30 2006 Return-Path: X-Original-To: freebsd-questions@freebsd.org Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 0AEFE16ACA4 for ; Mon, 22 May 2006 14:15:30 +0000 (UTC) (envelope-from greenwood.andy@gmail.com) Received: from ug-out-1314.google.com (ug-out-1314.google.com [66.249.92.174]) by mx1.FreeBSD.org (Postfix) with ESMTP id A1A3043DA7 for ; Mon, 22 May 2006 14:15:12 +0000 (GMT) (envelope-from greenwood.andy@gmail.com) Received: by ug-out-1314.google.com with SMTP id m3so1351254uge for ; Mon, 22 May 2006 07:14:58 -0700 (PDT) DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=beta; d=gmail.com; h=received:message-id:date:from:to:subject:cc:in-reply-to:mime-version:content-type:content-transfer-encoding:content-disposition:references; b=QqKOut603klXKFOfM+1p6hlJjvPvkUOn+bMOPyABeNWVD3RurBIlGhrrIRotQS20zM5vUMgP7+WVC70j+ivcMtSmbhvvKBk0hLnxn2oOhm/iXeG0C6dMApN79eOZo0UvEQGYRmskHIrUimqvPy4CihO7inIdCA/qcProApfjELw= Received: by 10.67.25.9 with SMTP id c9mr347793ugj; Mon, 22 May 2006 07:14:58 -0700 (PDT) Received: by 10.66.251.14 with HTTP; Mon, 22 May 2006 07:14:58 -0700 (PDT) Message-ID: <3ee9ca710605220714o7e333454qd3aae4e0a546765d@mail.gmail.com> Date: Mon, 22 May 2006 10:14:58 -0400 From: "Andy Greenwood" To: shih@math.jussieu.fr In-Reply-To: <20060522140951.GA29183@math.jussieu.fr> MIME-Version: 1.0 Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: quoted-printable Content-Disposition: inline References: <20060522131634.GW29183@math.jussieu.fr> <18e02bd30605220659m10680b26hf1342958157e2f57@mail.gmail.com> <20060522140951.GA29183@math.jussieu.fr> Cc: Iantcho Vassilev , FreeBSD Mailing List Subject: Re: pflog X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 22 May 2006 14:15:45 -0000 This is discussed in the openbsd pf page http://www.openbsd.org/faq/pf/logging.html#syslog On 5/22/06, Albert Shih wrote: > Le 22/05/2006 =E0 16:59:02+0300, Iantcho Vassilev a =E9crit > > On 5/22/06, Albert Shih wrote: > > > > When you write your rules, you put "log" in them.. > > > > > > example: > > pass in quick log proto tcp from any to any keep state > > > > > > then you have to have pflogd started(pflog_enable=3D"YES" in /etc/rc.co= nf). > > > > When pflog is started your binary log is lcated on /var/log/pflog > > > > you can read it witH: > > tcpdump -n -t -r /var/log/pflog > > > > if you want real time(because pflog is where is written with some delay= ) > > tcpdump -n -t -i pflog0 > > Thanks. But I known this thing. The problem is with this method the log i= s > first write on the hard-disk. And I don't want do that (well I don't > like...) > > I prefer the pflogd directly log to a central server. It's possible ? > > Regards. > > > -- > Albert SHIH > Universite de Paris 7 (Denis DIDEROT) > U.F.R. de Mathematiques. > 7 i=E8me =E9tage, plateau D, bureau 10 > Heure local/Local time: > Mon May 22 16:08:02 CEST 2006 > _______________________________________________ > freebsd-questions@freebsd.org mailing list > http://lists.freebsd.org/mailman/listinfo/freebsd-questions > To unsubscribe, send any mail to "freebsd-questions-unsubscribe@freebsd.o= rg" >