archives: /var/log/messages vs. /var/log/syslog from Joey Kelly on 2001-12-18 (nolugarchives)

From: Joey Kelly <looseduk_at_ductape.net>
Date: Tue, 18 Dec 2001 14:06:55 +0000
Message-Id: <0112181406558X.01203@rahab>

-- 
Joey Kelly
< Minister of the Gospel | Computer Networking Consultant >
http://joeykelly.dhs.org
"When Government fears the people, it's liberty.
When people fear the Government, it's tyranny."
-- Benjamin Franklin

attached mail follows:

Ron - take a look at you /etc/syslog.conf file. You will probably see that
you are logging *.* to /var/log/syslog and *.info to /var/log/messages

-----Original Message-----
From: Ron Johnson [mailto:ron.l.johnson@home.com]
Sent: Monday, December 10, 2001 1:29 PM
To: nolug@patientcarerx.com
Subject: Re: [Nolug] /var/log/messages vs. /var/log/syslog

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On Monday 10 December 2001 01:08 pm, Ron Johnson wrote:
> On Monday 10 December 2001 11:46 am, Manuel Lora wrote:
> > you are using mandrake right?
>
> Yes, mdk 8.0 w/ lots of cooker packages.
>
> > i think the same here
>
> Hmmm, wonder why both are generated, or at least 1 is a link to
> the other.

That *should* be "or at least 1 isn't a link"
^^^

> > ml
> >
> > On Monday 10 December 2001 11:22, you wrote:
> > > Hi,
> > >
> > > What's the difference? When I diff the files, all I see is
> > > that /var/log/messages has PAM_unix details. Otherwise, the
> > > files are the same.
> > >
> > > Thanks

- --
+-----------------------------------------------------------------+
| Ron Johnson, Jr. Home: ron.l.johnson@home.com |
| Jefferson, LA USA http://ronandheather.dhs.org:81 |
| |
| "Why should we not accept all in favor of woman suffrage |
| to our platform and association even though they be rabid |
| pro-slavery Democrats." |
| Susan B. Anthony, _History_of_Woman_Suffrage_ |
| http://www.ifeminists.com/introduction/essays/introduction.html |
+-----------------------------------------------------------------+
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.6 (GNU/Linux)
Comment: For info see http://www.gnupg.org

iD8DBQE8FQ0JjTz5dS9Us5wRAt6MAJ4l2ExHOLtMTUDiG1vEXXAESju8KQCfcOve
gl2lpAH44n/d+n4/uaBlO6E=
=O0Mv
-----END PGP SIGNATURE-----
___________________
Nolug mailing list
nolug@nolug.org

___________________
Nolug mailing list
nolug@nolug.org

attached mail follows:

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On Monday 10 December 2001 01:35 pm, Kevin Bucknum wrote:
> Ron - take a look at you /etc/syslog.conf file. You will probably
> see that you are logging *.* to /var/log/syslog and *.info to
> /var/log/messages

Thanks.

*.*;auth,authpriv.none - /var/log/syslog
*.info;mail.none;authpriv.none -/var/log/messages

So what can I put in syslog.conf to make ipchains messages to
/var/log/network?

>
>
> -----Original Message-----
> From: Ron Johnson [mailto:ron.l.johnson@home.com]
> Sent: Monday, December 10, 2001 1:29 PM
> To: nolug@patientcarerx.com
> Subject: Re: [Nolug] /var/log/messages vs. /var/log/syslog
>
> On Monday 10 December 2001 01:08 pm, Ron Johnson wrote:
> > On Monday 10 December 2001 11:46 am, Manuel Lora wrote:
> > > you are using mandrake right?
> >
> > Yes, mdk 8.0 w/ lots of cooker packages.
> >
> > > i think the same here
> >
> > Hmmm, wonder why both are generated, or at least 1 is a link to
> > the other.
>
> That *should* be "or at least 1 isn't a link"
> ^^^
>
> > > ml
> > >
> > > On Monday 10 December 2001 11:22, you wrote:
> > > > Hi,
> > > >
> > > > What's the difference? When I diff the files, all I see is
> > > > that /var/log/messages has PAM_unix details. Otherwise, the
> > > > files are the same.
> > > >
> > > > Thanks

iD8DBQE8FRDqjTz5dS9Us5wRAhYFAJ4iiVCLA5TVDb+eH545V8WMt5hzGACeKMvU
7RYNqrmVzRQXdo5udFop1gw=
=SEbP
-----END PGP SIGNATURE-----
___________________
Nolug mailing list
nolug@nolug.org

attached mail follows:

Ron Johnson <ron.l.johnson@home.com> writes:

You need to find out what priority and facility ipchains sends syslog
messages to then add that to syslog.conf. ie.
facilityname.priorityname - /var/log/yourlogfileofchoice

Then "kill -HUP " your syslogd process.

> On Monday 10 December 2001 01:35 pm, Kevin Bucknum wrote:
> > Ron - take a look at you /etc/syslog.conf file. You will probably
> > see that you are logging *.* to /var/log/syslog and *.info to
> > /var/log/messages
>
> Thanks.
>
> *.*;auth,authpriv.none - /var/log/syslog
> *.info;mail.none;authpriv.none -/var/log/messages
>
> So what can I put in syslog.conf to make ipchains messages to
> /var/log/network?
>
> >
> >
> > -----Original Message-----
> > From: Ron Johnson [mailto:ron.l.johnson@home.com]
> > Sent: Monday, December 10, 2001 1:29 PM
> > To: nolug@patientcarerx.com
> > Subject: Re: [Nolug] /var/log/messages vs. /var/log/syslog
> >
> > On Monday 10 December 2001 01:08 pm, Ron Johnson wrote:
> > > On Monday 10 December 2001 11:46 am, Manuel Lora wrote:
> > > > you are using mandrake right?
> > >
> > > Yes, mdk 8.0 w/ lots of cooker packages.
> > >
> > > > i think the same here
> > >
> > > Hmmm, wonder why both are generated, or at least 1 is a link to
> > > the other.
> >
> > That *should* be "or at least 1 isn't a link"
> > ^^^
> >
> > > > ml
> > > >
> > > > On Monday 10 December 2001 11:22, you wrote:
> > > > > Hi,
> > > > >
> > > > > What's the difference? When I diff the files, all I see is
> > > > > that /var/log/messages has PAM_unix details. Otherwise, the
> > > > > files are the same.
> > > > >
> > > > > Thanks
>
> --
> +-----------------------------------------------------------------+
> | Ron Johnson, Jr. Home: ron.l.johnson@home.com |
> | Jefferson, LA USA http://ronandheather.dhs.org:81 |
> | |
> | "Why should we not accept all in favor of woman suffrage |
> | to our platform and association even though they be rabid |
> | pro-slavery Democrats." |
> | Susan B. Anthony, _History_of_Woman_Suffrage_ |
> | http://www.ifeminists.com/introduction/essays/introduction.html |
> +-----------------------------------------------------------------+
> ___________________
> Nolug mailing list
> nolug@nolug.org
>

-- 
Scott Harney <scott_harney@yahoo.com>
Broadband Services Manager (LA)
Charter Communications
___________________
Nolug mailing list
nolug@nolug.org

attached mail follows:

Ron - take a look at you /etc/syslog.conf file. You will probably see that
you are logging *.* to /var/log/syslog and *.info to /var/log/messages

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

That *should* be "or at least 1 isn't a link"
^^^

iD8DBQE8FQ0JjTz5dS9Us5wRAt6MAJ4l2ExHOLtMTUDiG1vEXXAESju8KQCfcOve
gl2lpAH44n/d+n4/uaBlO6E=
=O0Mv
-----END PGP SIGNATURE-----
___________________
Nolug mailing list
nolug@nolug.org

___________________
Nolug mailing list
nolug@nolug.org

attached mail follows:

Pretty sure ipchains is using a printk at level 4 to do it's logging. So
you would need to put a kern.warn line directing the output to
/var/log/network. if you don't want this info in the other files you would
add it after the ; on those lines.

-----Original Message-----
From: Ron Johnson [mailto:ron.l.johnson@home.com]
Sent: Monday, December 10, 2001 1:46 PM
To: nolug@patientcarerx.com
Subject: Re: [Nolug] /var/log/messages vs. /var/log/syslog

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Thanks.

*.*;auth,authpriv.none - /var/log/syslog
*.info;mail.none;authpriv.none -/var/log/messages

So what can I put in syslog.conf to make ipchains messages to
/var/log/network?

iD8DBQE8FRDqjTz5dS9Us5wRAhYFAJ4iiVCLA5TVDb+eH545V8WMt5hzGACeKMvU
7RYNqrmVzRQXdo5udFop1gw=
=SEbP
-----END PGP SIGNATURE-----
___________________
Nolug mailing list
nolug@nolug.org

___________________
Nolug mailing list
nolug@nolug.org

attached mail follows:

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hi,

What's the difference? When I diff the files, all I see is
that /var/log/messages has PAM_unix details. Otherwise, the
files are the same.

Thanks
- --
+-----------------------------------------------------------------+
| Ron Johnson, Jr. Home: ron.l.johnson@home.com |
| Jefferson, LA USA http://ronandheather.dhs.org:81 |
| |
| "Why should we not accept all in favor of woman suffrage |
| to our platform and association even though they be rabid |
| pro-slavery Democrats." |
| Susan B. Anthony, _History_of_Woman_Suffrage_ |
| http://www.ifeminists.com/introduction/essays/introduction.html |
+-----------------------------------------------------------------+
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.6 (GNU/Linux)
Comment: For info see http://www.gnupg.org

iD8DBQE8FOFRjTz5dS9Us5wRAtrpAJ0U4cvjWWHfvXjpRF5jY9nuCctWtACdH6t4
YxMTUvosaBFc6jCCC/YUdgY=
=0E6+
-----END PGP SIGNATURE-----
___________________
Nolug mailing list
nolug@nolug.org

attached mail follows:

you are using mandrake right?

i think the same here

On Monday 10 December 2001 11:22, you wrote:
> Hi,
>
> What's the difference? When I diff the files, all I see is
> that /var/log/messages has PAM_unix details. Otherwise, the
> files are the same.
>
> Thanks

-- 
Linux 2.4.16
 12:46pm  up 1 day, 12:26,  2 users,  load average: 0.11, 0.21, 0.23
Eating chocolate is like being in love without the aggravation.
___________________
Nolug mailing list
nolug@nolug.org

attached mail follows:

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On Monday 10 December 2001 11:46 am, Manuel Lora wrote:
> you are using mandrake right?

Yes, mdk 8.0 w/ lots of cooker packages.

> i think the same here

Hmmm, wonder why both are generated, or at least 1 is a link to
the other.

> ml
>
> On Monday 10 December 2001 11:22, you wrote:
> > Hi,
> >
> > What's the difference? When I diff the files, all I see is
> > that /var/log/messages has PAM_unix details. Otherwise, the
> > files are the same.
> >
> > Thanks

iD8DBQE8FQg4jTz5dS9Us5wRAhDVAJ0RpILKj/lklsQ45i1oZA5wYh65RACfazCO
ST7HNeJnvKj8LK9zVleUB1k=
=pmfZ
-----END PGP SIGNATURE-----
___________________
Nolug mailing list
nolug@nolug.org

attached mail follows:

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

That *should* be "or at least 1 isn't a link"
^^^

iD8DBQE8FQ0JjTz5dS9Us5wRAt6MAJ4l2ExHOLtMTUDiG1vEXXAESju8KQCfcOve
gl2lpAH44n/d+n4/uaBlO6E=
=O0Mv
-----END PGP SIGNATURE-----
___________________
Nolug mailing list
nolug@nolug.org
Received on 12/18/01