The best recommendation I've been given is to install syslog-ng which can be found at freshmeat.net or souceforge.
>From freshmeat.net.... syslog-ng, as the name shows, is a syslogd replacement, but with new functionality for the new generation. The original syslogd allows messages only to be sorted based on priority/facility pairs; syslog-ng adds the possibility to filter based on message contents using regular expressions. The new configuration scheme is intuitive and powerful. Forwarding logs over TCP and remembering all forwarding hops makes it ideal for firewalled environments. Val On Wed, 2002-03-27 at 14:29, LuisMi wrote: > I am trying to find a solution for this problem too. > Let me know if you discover something :-) > > -- > +-------------------------------------------------------------------+ > | Luis Miguel Cruz. | > | | > | [ADPSOFT] http://www.adpsoft.com | > | "Connecting your business" | > | | > | irc.irc-hispano.org -> #redhat | > | http://www.flcnet.es/tbe/luismi | > | Canal IRC para usuarios RedHat Linux | > | | > | Public Key: http://www.flcnet.es/tbe/luismi/nadie/luismi_adp.asc | > +-------------------------------------------------------------------+ > > On 27 Mar 2002, Val Schmidt wrote: > > > This is probably simple and is probably more of a syslog question than > > iptables, but any help would be appreciated. > > > > I'd like to write iptables logs to a separate file than normal kernel > > messages. > > > > Since other kernal messages are already logged at the info level and > > above to /var/log/messages, the only solution I can see is to log > > firewall logs at the debug level to a separate file. But that'll create > > a lot of unwanted reproduced kernel messages in the firewall logs. > > > > How does the rest of the world do this? > > > > Val Schmidt > > Lamont Doherty Earth Observatory > > > > > > > > > > > > >
