Unexepected results when piping syslog to a fifo

Paul Schmehl pauls at utdallas.edu
Thu Nov 29 19:30:33 UTC 2012


I'm working on a project which requires that I pipe a remote syslog to a 
fifo so a daemon can parse the results.  After some googling I *thought* 
that I had figured out how to configure syslog to do this.  Here's the 
syslog.conf entry:

+ hostname.utdallas.edu
*.* | cat > /var/run/program/program.fifo

This seems to work for one syslog message.  The rest go to 
/var/log/messages.

So I tried this:
+ hostname.utdallas.edu
*.* | tail -f > /var/run/program/program.fifo

But that seems to do the same thing.

I want these messages to be piped to the fifo *only* and not show up in 
local logs.  What's the secret sauce for this?

-- 
Paul Schmehl (pauls at utdallas.edu)
Senior Information Security Analyst
The University of Texas at Dallas
http://www.utdallas.edu/infosecurity/



More information about the freebsd-questions mailing list