From owner-freebsd-questions  Sun Nov  7 10: 9:17 1999
Delivered-To: freebsd-questions@freebsd.org
Received: from cc942873-a.ewndsr1.nj.home.com (cc942873-a.ewndsr1.nj.home.com [24.2.89.207])
	by hub.freebsd.org (Postfix) with ESMTP id B3E0714EC7
	for <freebsd-questions@FreeBSD.ORG>; Sun,  7 Nov 1999 10:09:14 -0800 (PST)
	(envelope-from cjc@cc942873-a.ewndsr1.nj.home.com)
Received: (from cjc@localhost)
	by cc942873-a.ewndsr1.nj.home.com (8.9.3/8.9.3) id NAA35721;
	Sun, 7 Nov 1999 13:12:42 -0500 (EST)
	(envelope-from cjc)
From: "Crist J. Clark" <cjc@cc942873-a.ewndsr1.nj.home.com>
Message-Id: <199911071812.NAA35721@cc942873-a.ewndsr1.nj.home.com>
Subject: Re: Logging inetd and all connections/failures
In-Reply-To: <87904aagu3.fsf@main.wgaf.net> from Arcady Genkin at "Nov 7, 1999 02:41:56 am"
To: a.genkin@utoronto.ca (Arcady Genkin)
Date: Sun, 7 Nov 1999 13:12:42 -0500 (EST)
Cc: freebsd-questions@FreeBSD.ORG
Reply-To: cjclark@home.com
X-Mailer: ELM [version 2.4ME+ PL54 (25)]
MIME-Version: 1.0
Content-Type: text/plain; charset=US-ASCII
Content-Transfer-Encoding: 7bit
Sender: owner-freebsd-questions@FreeBSD.ORG
Precedence: bulk
X-Loop: FreeBSD.ORG

Arcady Genkin wrote,
> "Crist J. Clark" <cjc@cc942873-a.ewndsr1.nj.home.com> writes:
> 
> > You did reboot if you only made changes to rc.conf.local, right? If
> > you do,
> 
> Of course. ;^)
> 
> > % ps aux | grep inetd
> 
> Oh, inetd is running.
> root       234  0.0  1.3   892  392  ??  Is    2:00PM   0:00.11 inetd -lwW
> 
> > What do you get? It should have the flags that you indicated.
> > 
> > > Neither are pings and alike. syslogd and inetd are running.
> > 
> > I believe inetd will only log connection attempts for ports on which it
> > is listening. Since it is only listening for TCP and UDP connections,
> > ICMP, like ping, will never be seen by inetd.
> 
> Yes, but I thought the "log_in_vain" was going to give me that.

Hmmm... I see two sysctl knobs for that,

net.inet.tcp.log_in_vain
net.inet.udp.log_in_vain

So I am not sure if ICMP might fall through the cracks there. Anyway,
those are not getting logged for the same reason. A quick look at
/usr/src/sys/netinet/tcp_input.c shows that it is being logged at the
'info' level.
-- 
Crist J. Clark                           cjclark@home.com


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message