cvs commit: src/etc syslog.conf

[Gleb Smirnoff]

On Tue, Feb 22, 2005 at 02:20:40AM -0600, Mike Silbersack wrote:
M> > Security:       this change fixes a DoS condition, when default system
M> >                 console is serial, and box is flooded with bogus ARP
M> >                 packets
M> 
M> Go rate-limit those messages, like we do with other kernel messages.  grep 
M> for "ppsratecheck" in /usr/src/sys/kern to see the other users of that 
M> function.
M> 
M> If losing information about the flood is an issue, you could use 
M> ppsratecheck to ensure that a generic "arp flood" message goes to the 
M> console, but the actual messages are sent with a lower priority.

No information is lost. All kern.debug is written to /var/log/messages.

-- 
Totus tuus, Glebius.
GLEBIUS-RIPN GLEB-RIPE