ipf not loging (5.2.1)

[Remko Lodder]

John Murphy wrote:
> Thanks both for the suggestions.  I tried:
> ipmon_flags="-Dsn" and ipmon_flags="-oi /var/log/ipflog"
> to no avail.  I even read man ipmon!
> 
> As far as I can tell ipmon is not starting via rc.conf.
> If I start it manually with:
> ipmon -P -D -oi /var/log/ipflog it works (although I don't
> see a PID in /var/run even if I leave out the -D).
> 
> The FM could do with updating as it also says:
>    In order for ipmon to properly work, the kernel option
>    IPFILTER_LOG must be turned on in your kernel.  Please
>    see options(4) for more details.
> 
> There is no IPFILTER_LOG kernel option mentioned in GENERIC
> or NOTES and there is no options(4) man page (FreeBSD-5.2.1).

That's true that it's not mentioned in the GENERIC configuration,
more options are not shown there. And actually i cannot find it... :-) 
(in a description about building the kernel..)
The correct syntax would be ipmon -D /var/log/ipflog (as i read the man 
page to see the correct syntax here)

But, i agree, it does not start with freebsd starting..


-- 

Kind regards,

Remko Lodder
Elvandar.org/DSINet.org
www.mostly-harmless.nl A Dutch community for helping newcomers on the 
hackerscene