pflogd log
Zbigniew Szalbot
zszalbot at gmail.com
Tue Jan 22 09:45:32 PST 2008
Hello,
2008/1/22, Rakhesh Sasidharan <rakhesh at rakhesh.com>:
> Zbigniew Szalbot wrote:
>
> > Hello,
> >
> > 2008/1/22, Rakhesh Sasidharan <rakhesh at rakhesh.com>:
> >>
> >>> I noticed that pflog is not being written to.
> >>>
> >>> $ l /var/log/pflog
> >>> -rw-r--r-- 1 root wheel 60 Jan 22 00:00 /var/log/pflog
> >>>
> >>> However, the process running pflogd runs as _pflogd. Does this mean I
> >>> should chown the log file with user _pflogd?
> >>
> >> I don't think so. Had a look at my machine, /var/log/pflog has permissions
> >> like on yours.
> >>
> >>> _pflogd 248 0.0 0.2 1632 1056 ?? S 6:49AM 0:01.31
> >>> pflogd: [suspended] -s 116 -f /var/log/pflog (pflogd)
> >>>
> >>> To complete the picture:
> >>>
> >>> $ ps aux |grep pf
> >>> root 36 0.0 0.0 0 8 ?? DL 6:49AM 0:01.04 [softdepflush]
> >>> root 246 0.0 0.2 1568 1004 ?? Is 6:49AM 0:00.01
> >>> pflogd: [priv] (pflogd)
> >>> _pflogd 248 0.0 0.2 1632 1056 ?? S 6:49AM 0:01.32
> >>> pflogd: [suspended] -s 116 -f /var/log/pflog (pflogd)
> >>
> >> I don't have pflogd: [suspended] though. Its pflogd: [running] for me.
> >> Have you tried restart /etc/rc.d/pflog?
> >
> > Thanks! Need to find out what is going on. Have restarted pflogd but
> > it is still showing suspend for me.
>
> Try sending the pflogd process a HUP or ALRM signal. That should do the
> trick. Funny how I missed it the first time, but I had a look at the
> pflogd(8) manpage once again and it talks about this problem.
>
> This is the para just above the options section.
>
> Let me know how it goes.
>
> Also, just noticed now that my /var/log/pflog file doesn't have read perms
> for the others group. Would suggest removing that and trying again.
> Possible the extra perms are an issue.
I do not know.
l /var/log/pflog
-rw------- 1 root wheel 60 Jan 22 00:00 /var/log/pflog
$ ps ax |grep pflog
25478 ?? Is 0:00.01 pflogd: [priv] (pflogd)
25479 ?? S 0:00.03 pflogd: [suspended] -s 116 -f /var/log/pflog (pflogd)
25561 p0 S+ 0:00.01 grep pflog
Not really sure what is going on. I tried:
kill -HUP 25479
but to no avail.
Thanks!
Zbigniew Szalbot
More information about the freebsd-questions
mailing list