From owner-freebsd-questions@FreeBSD.ORG Tue Oct 9 23:38:49 2007 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 9D73C16A418 for ; Tue, 9 Oct 2007 23:38:49 +0000 (UTC) (envelope-from sdafreebsduk@rowyerboat.com) Received: from rutherford.zen.co.uk (rutherford.zen.co.uk [212.23.3.142]) by mx1.freebsd.org (Postfix) with ESMTP id 3942C13C43E for ; Tue, 9 Oct 2007 23:38:48 +0000 (UTC) (envelope-from sdafreebsduk@rowyerboat.com) Received: from [82.70.166.86] (helo=[192.168.0.200]) by rutherford.zen.co.uk with esmtp (Exim 4.50) id 1IfOey-0006Mq-D4; Tue, 09 Oct 2007 23:38:44 +0000 Message-ID: <470C10F9.9000404@rowyerboat.com> Date: Wed, 10 Oct 2007 00:38:33 +0100 From: sdafreebsduk@rowyerboat.com User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.1.3) Gecko/20070326 Thunderbird/2.0.0.0 Mnenhy/0.7.5.666 MIME-Version: 1.0 To: Mel References: <47096FD7.4000309@rowyerboat.com> <470A3D96.3000904@qwirky.net> <200710100034.54218.fbsd.questions@rachie.is-a-geek.net> In-Reply-To: <200710100034.54218.fbsd.questions@rachie.is-a-geek.net> Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit X-Originating-Rutherford-IP: [82.70.166.86] Cc: lists@qwirky.net, freebsd-questions@freebsd.org Subject: Re: /var/log/messages filling up with DHCPDISCOVER messages X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 09 Oct 2007 23:38:49 -0000 Thanks to both of you... I'd already sussed out and used what Mel suggested, but I've learnt for the future, from Jeff's suggestion. It all makes sense going back through the man pages, when you get a couple of examples explained to you. Many thanks, Steve ;) -- Mel wrote: > On Monday 08 October 2007 16:24:22 Jeff Royle wrote: >> Stephen Allen wrote: >>> /usr/local/etc/dhcpd.conf is configured with >>> >>> "log-facility local7;" >>> >>> and /etc/syslog.conf is also configured with >>> >>> "local7.* /var/log/dhcpd.log" >>> >>> However, /var/log/messages is filling up with "DHCPDISCOVER / no free >>> leases" messages for those clients that are unknown to the DHCP server >>> (eg. on a different subnet). I suspect that these messages are being >>> caught by "*.notice" which is why they end up in /var/log/messages. >>> >>> Is there a way to prevent this happening? >> You could try filtering them out of syslog like so (in your syslogd.conf): >> >> "local7.!=notice /var/log/dhcpd.log" >> >> Which should log everything for local7 except notice. See man >> syslog.conf(5) > > Almost correct but he doesn't want /var/log/messages filling up, so add > local7.none to the line that points to /var/log/messages, ie: > --- /etc/syslog.conf 2007-09-20 09:22:55.000000000 -0800 > +++ /etc/syslog.conf.dhcpd 2007-10-09 14:32:18.000000000 -0800 > @@ -6,7 +6,7 @@ > # may want to use only tabs as field separators here. > # Consult the syslog.conf(5) manpage. > *.err;kern.warning;auth.notice;mail.crit /dev/console > -*.notice;authpriv.none;kern.debug;lpr.info;mail.crit;news.err /var/log/messages > +*.notice;local7.none;authpriv.none;kern.debug;lpr.info;mail.crit;news.err /var/log/messages > security.* /var/log/security > auth.info;authpriv.info /var/log/auth.log > mail.info /var/log/maillog > >