Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 23 Jan 2008 08:42:12 +0400 (GST)
From:      Rakhesh Sasidharan <rakhesh@rakhesh.com>
To:        Zbigniew Szalbot <zszalbot@gmail.com>
Cc:        freebsd-questions@freebsd.org
Subject:   Re: pflogd log
Message-ID:  <20080123084020.L38771@obelix.home.rakhesh.com>
In-Reply-To: <94136a2c0801220945j164eaf9clffeeda7186242cd1@mail.gmail.com>
References:  <94136a2c0801220259x1b7dd4efw7a8fc1e8a60d2cc9@mail.gmail.com>  <20080122202158.R45709@dogmatix.home.rakhesh.com>  <94136a2c0801220845w6bbf50c9q7ba59052c72e871d@mail.gmail.com>  <20080122211202.Q45709@dogmatix.home.rakhesh.com> <94136a2c0801220945j164eaf9clffeeda7186242cd1@mail.gmail.com>

next in thread | previous in thread | raw e-mail | index | archive | help

>>>>> I noticed that pflog is not being written to.
>>>>>
>>>>> $ l /var/log/pflog
>>>>> -rw-r--r--  1 root  wheel  60 Jan 22 00:00 /var/log/pflog
>>>>>
>>>>> However, the process running pflogd runs as _pflogd. Does this mean I
>>>>> should chown the log file with user _pflogd?
>>>>
>> Also, just noticed now that my /var/log/pflog file doesn't have read perms
>> for the others group. Would suggest removing that and trying again.
>> Possible the extra perms are an issue.
>
> I do not know.
>
> l /var/log/pflog
> -rw-------  1 root  wheel  60 Jan 22 00:00 /var/log/pflog

Ok. In your original mail, the permissions were different ...

> $ ps ax |grep pflog
> 25478  ??  Is     0:00.01 pflogd: [priv] (pflogd)
> 25479  ??  S      0:00.03 pflogd: [suspended] -s 116 -f /var/log/pflog (pflogd)
> 25561  p0  S+     0:00.01 grep pflog
>
> Not really sure what is going on. I tried:
> kill -HUP 25479

I would suggest asking this question on the freebsd-pf mailing list then. 
They can help better I guess.

Thanks,
Rakhesh

---
http://rakhesh.net/



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20080123084020.L38771>