newsyslogd / pflogd : daily logfiles for pf

Ruben mail at osfux.nl
Thu Aug 9 10:01:44 UTC 2018


Hi,

Somebody contacted me off-list and provided a lot of knowledge / efforts 
troubleshooting this issue: TnX!

The problem eventually turned out to be (totally) unrelated to both 
newsylog and pflogd, and the issue has been "solved".

Kind regards,

Ruben

On 08/01/2018 12:34 PM, Ruben wrote:
> Hi,
> 
> Anybody out there with a working rotation on /var/log/pflog (using 
> newsyslog) ?
> 
> All help/suggestions welcome!
> 
> Kind regards,
> 
> Ruben
> 
> On 07/30/2018 05:12 PM, Ruben wrote:
>>
>> Hi List,
>>
>>
>> I'm running PF on some FreeBSD 11.x installs and I would very much 
>> like to have daily logfiles containing the entries that land up in the 
>> pflog device. I'm having trouble switching from "max size" rotation to 
>> "once a day, regardless of size" rotation.
>>
>>
>>
>> My pflog entry in /etc/newsyslog.conf looked like this:
>>
>> /var/log/pflog      600  3    100    @T00 JB    /var/run/pflogd.pid
>>
>>
>> and after my attempted change now looks like this:
>>
>> /var/log/pflog      600  30    *    @T00 JB    /var/run/pflogd.pid
>>
>>
>> but no new /var/log/pflog.0.bz2 files are created anymore. If I run 
>> the newsyslog binary manually like this :
>>
>> /usr/sbin/newsyslog -vCF
>>
>> then the /var/log/pflog.* are created / rotated.
>>
>>
>> Could somebody perhaps shed some light on what I'm doing wrong here?
>>
>>
>> Any help appreciated!
>>
>>
>> Kind regards,
>>
>>
>> Ruben
>> _______________________________________________
>> freebsd-questions at freebsd.org mailing list
>> https://lists.freebsd.org/mailman/listinfo/freebsd-questions
>> To unsubscribe, send any mail to 
>> "freebsd-questions-unsubscribe at freebsd.org"
> _______________________________________________
> freebsd-questions at freebsd.org mailing list
> https://lists.freebsd.org/mailman/listinfo/freebsd-questions
> To unsubscribe, send any mail to 
> "freebsd-questions-unsubscribe at freebsd.org"


More information about the freebsd-questions mailing list