Hello,
I'm running current (a few days old).
I would like to log some traffic to the pflog1 interface. Everything works
fine except a problem with pflogd and the -p switch.
I use the following as default:
1) pflogd -s 116 -i pflog0 -f /var/log/pflog
The process is:
$ cat /var/run/pflogd.pid
9293
Everything is fine here!
Now, I would like to use the following for the pflog1 interface:
1) pflogd -s 116 -i pflog1 -f /var/log/pflog1 -p /var/log/pflogd1.pid
But the -p switch doesn't work -p /var/log/pflogd1.pid, pflogd does not
write the PID to pflogd1.pid ...
sudo cat /var/run/pflogd1.pid returns nothing.
It looks like -p is simply ignored.
The (old/previous) PID file is still the same which is actually normal ... but
just in case ...:
$ sudo cat /var/run/pflogd.pid
9293
Here is the output of pstree:
$ pstree -s pflogd -w
-+= 1 root /sbin/init
|-+= 09293 root pflogd: [priv] (pflogd)
| \--- 18342 _pflogd pflogd: [running] -s 116 -i pflog0 -f /var/log/pflog
(pflogd)
\-+= 19480 root pflogd: [priv] (pflogd)
\--- 19710 _pflogd pflogd: [running] -s 116 -i pflog1 -f /var/log/pflog1
(pflogd)
I'm not a specialist and may be I overlooked something.
How can I make this to work:
pflogd -s 116 -i pflog1 -f /var/log/pflog1 -p /var/log/pflogd1.pid
Thanks a lot!!!
Didier