Bering-uClibc logs the netfilter logs through ulogd and not syslog. According to the change log that was changed by Shorewall some time ago and there was probably a reason for it. Trying to funnel it again through rsyslog is probably not the best idea.
ulogd can be configured to only log after 4k data is collected (but then it flushes the whole buffer, not only 4k). And it can even write 2 log files concurrently. One to the ram disk without delay and one to a flash media with delay. But I think that's still to much for a usb flash key. And I have no idea if USB keys fail nice if they start to wear out (probably not). On Wed, Jan 20, 2016 at 11:37 PM, Erich Titl <erich.t...@think.ch> wrote: > > Why not add a ssd for logs? > I think that's the best solution. There are 30 GB mSATA SSDs that cost about €20 and are specified for 3 drive writes per day during their 3 year warranty. I wasn't aware that these small SSDs can take that many writes. But they should not have problems with my measly 100 MB logs per day. :-) <http://www.kingston.com/datasheets/sms200s3_en.pdf> Thanks for pointing me to that solution. ------------------------------------------------------------------------------ Site24x7 APM Insight: Get Deep Visibility into Application Performance APM + Mobile APM + RUM: Monitor 3 App instances at just $35/Month Monitor end-to-end web transactions and take corrective actions now Troubleshoot faster and improve end-user experience. Signup Now! http://pubads.g.doubleclick.net/gampad/clk?id=267308311&iu=/4140 ------------------------------------------------------------------------ leaf-user mailing list: leaf-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/leaf-user Support Request -- http://leaf-project.org/