Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 27 Apr 2004 16:20:31 +0200
From:      Remko Lodder <remko@elvandar.org>
To:        jfm@blueyonder.co.uk
Cc:        Dev Tugnait <dev@unixdaemon.org>
Subject:   Re: ipf not loging (5.2.1)
Message-ID:  <408E6C2F.3020604@elvandar.org>
In-Reply-To: <j0js80hpj92ovpsen2faf2dk3e9rt3n8qr@4ax.com>
References:  <b75r80d3visorpqfkpl8f6h0u2megdd2gl@4ax.com> <20040427090313.GA35577@hellsing.vampire.net> <50338.145.221.92.40.1083056794.squirrel@webmail.evilcoder.org> <20040427091328.GC35577@hellsing.vampire.net> <j0js80hpj92ovpsen2faf2dk3e9rt3n8qr@4ax.com>

next in thread | previous in thread | raw e-mail | index | archive | help
John Murphy wrote:
> Thanks both for the suggestions.  I tried:
> ipmon_flags="-Dsn" and ipmon_flags="-oi /var/log/ipflog"
> to no avail.  I even read man ipmon!
> 
> As far as I can tell ipmon is not starting via rc.conf.
> If I start it manually with:
> ipmon -P -D -oi /var/log/ipflog it works (although I don't
> see a PID in /var/run even if I leave out the -D).
> 
> The FM could do with updating as it also says:
>    In order for ipmon to properly work, the kernel option
>    IPFILTER_LOG must be turned on in your kernel.  Please
>    see options(4) for more details.
> 
> There is no IPFILTER_LOG kernel option mentioned in GENERIC
> or NOTES and there is no options(4) man page (FreeBSD-5.2.1).

That's true that it's not mentioned in the GENERIC configuration,
more options are not shown there. And actually i cannot find it... :-) 
(in a description about building the kernel..)
The correct syntax would be ipmon -D /var/log/ipflog (as i read the man 
page to see the correct syntax here)

But, i agree, it does not start with freebsd starting..


-- 

Kind regards,

Remko Lodder
Elvandar.org/DSINet.org
www.mostly-harmless.nl A Dutch community for helping newcomers on the 
hackerscene



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?408E6C2F.3020604>