From owner-freebsd-questions  Tue Jul 23 22:11:38 1996
Return-Path: owner-questions
Received: (from root@localhost)
          by freefall.freebsd.org (8.7.5/8.7.3) id WAA15549
          for questions-outgoing; Tue, 23 Jul 1996 22:11:38 -0700 (PDT)
Received: from gdi.uoregon.edu (cisco-ts17-line7.uoregon.edu [128.223.150.224])
          by freefall.freebsd.org (8.7.5/8.7.3) with ESMTP id WAA15543
          for <freebsd-questions@freebsd.org>; Tue, 23 Jul 1996 22:11:35 -0700 (PDT)
Received: from localhost (dwhite@localhost) by gdi.uoregon.edu (8.7.5/8.6.12) with SMTP id WAA00334; Tue, 23 Jul 1996 22:11:27 -0700 (PDT)
Date: Tue, 23 Jul 1996 22:11:27 -0700 (PDT)
From: Doug White <dwhite@riley-net170-164.uoregon.edu>
Reply-To: dwhite@resnet.uoregon.edu
To: Anthony Hill <ahill@interconnect.com.au>
cc: freebsd-questions@freebsd.org
Subject: Re: firewall log files
In-Reply-To: <Pine.BSI.3.91.960723112818.18929A-100000@tulpi.interconnect.com.au>
Message-ID: <Pine.BSI.3.94.960723221026.243I-100000@gdi.uoregon.edu>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
Sender: owner-questions@freebsd.org
X-Loop: FreeBSD.org
Precedence: bulk

On Tue, 23 Jul 1996, Anthony Hill wrote:

> I need to get IPFILTER to log to a file other than /var/log/messages, 
> which is too full of other guff. Anyone got any idea how I would go about 
> this ?

It depends on how it is logged, but you can use syslog.conf to parse this
out.  Check out the manpages for syslog and ipfilter, and perhaps the
source to figure out how it is logging (ie, what category).

Doug White                              | University of Oregon  
Internet:  dwhite@resnet.uoregon.edu    | Residence Networking Assistant
http://gladstone.uoregon.edu/~dwhite    | Computer Science Major