Skip site navigation (1)Skip section navigation (2)
Date:      Sun, 18 Oct 1998 01:10:33 -0500
From:      "Jeffrey J. Mountin" <jeff-ml@mountin.net>
To:        "Jan B. Koum " <jkb@best.com>, Sheldon Hearn <axl@iafrica.com>, Igor Roshchin <igor@physics.uiuc.edu>
Cc:        security@FreeBSD.ORG
Subject:   Re: syslogd and syslog.conf (new feature)
Message-ID:  <3.0.3.32.19981018011033.00fc17e8@207.227.119.2>
In-Reply-To: <19981017134231.C22818@best.com>
References:  <XFMail.981017154818.vev@michvhf.com> <199810171855.NAA18114@set.spradley.tmi.net> <XFMail.981017154818.vev@michvhf.com>

next in thread | previous in thread | raw e-mail | index | archive | help
At 01:42 PM 10/17/98 -0700, Jan B. Koum wrote:
>        Hate to be the party pooper here, but when people will learn to
>        trim -security (and -stable also in this case) from threads which 
>	really should be on -chat?   
>

Agreed.


One last thought about syslogd.  If you consider the default setup for
syslog.conf and the fact that *most* messages are going to one logfile,
which can get messy and difficult to discern the important from the
routine.  With that in mind why not have the LEVEL after the FACILITY in
the log?

<date> <host> <program>[<pid>]: <level>: <message>

Programs like ssh and Apache do something along this line.

Certainly would make it easy to search/grep the logs for things demanding
more notice than usual.  Not to mention if you want to pipe your syslog
through a script it provides another common point for comparison.

A better feature/improvement (for my usage) than having something to remind
me about spaces and or ignore them (neither applies).


Jeff Mountin - Unix Systems TCP/IP networking
jeff@mountin.net

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?3.0.3.32.19981018011033.00fc17e8>