logging to another machine

Daniel Hartmeier daniel at benzedrine.cx
Mon Sep 5 01:21:25 PDT 2005


On Mon, Sep 05, 2005 at 10:09:49AM +0200, Vladimir Kotal wrote:

> So, the following looks like what can be put into /etc/rc* script for your
> favorite embedded distribution:
> 
> ifconfig pflog0 up
> tcpdump -s 96 -l -e -t -i pflog0 2>/dev/null | \
> 	logger -p local0.info -t pf &
> 
> It could be nice if pflogd supported logging to syslog directly.

It would have to duplicate (or link against, I guess) a lot of code in
tcpdump, especially all the protocol-printers if you wanted to add -vvv,
and then that code redundancy would have to be kept in sync, etc.

One tool for one purpose, right? :)

Daniel


More information about the freebsd-pf mailing list