[syslog-ng]Iptables is not logging to sysylog-ng

James Sneeringer james+syslogng@vincentsystems.com
Sun, 28 Apr 2002 00:04:50 -0500


On Fri, Apr 26, 2002 at 05:16:48PM -0400, Victor wrote:
| What exactly does klogd do? was it separated from syslogd for Licensing
| issues? Is it safe to replace klogd with --file("/proc/kmsg"); ?
| Also, can you give an example of actual config that has this?

klogd is meant to be a filter for certain kernel messages.  Some messages
(like those from iptables) are ordinary.  Others, such as kernel panics,
are generally logged in hex or some other human-unfriendly form.  klogd
understands these messages and converts them to a friendlier form.  It is
not necessary to run klogd, as syslogd or syslog-ng can parse /proc/kmsg
just fine, but the information read from /proc/kmsg may not be very useful
without the processing klogd does.

-James