[syslog-ng]Iptables is not logging to sysylog-ng

Balazs Scheidler bazsi@balabit.hu
Mon, 29 Apr 2002 11:09:44 +0200


On Sun, Apr 28, 2002 at 02:01:54AM -0400, Victor wrote:
> > On Fri, Apr 26, 2002 at 05:16:48PM -0400, Victor wrote:
> >
> > | What exactly does klogd do? was it separated from syslogd for Licensing
> > | issues? Is it safe to replace klogd with --file("/proc/kmsg"); ?
> > | Also, can you give an example of actual config that has this?
> >
> > klogd is meant to be a filter for certain kernel messages.  Some messages
> > (like those from iptables) are ordinary.  Others, such as kernel panics,
> > are generally logged in hex or some other human-unfriendly form.  klogd
> > understands these messages and converts them to a friendlier form.  It is
> > not necessary to run klogd, as syslogd or syslog-ng can parse /proc/kmsg
> > just fine, but the information read from /proc/kmsg may not be very useful
> > without the processing klogd does.
> 
> Ah, I see. Thanks. Makes sense now.

klogd preprocessing is deprecated, everybody suggests to use ksymoops
instead.

-- 
Bazsi
PGP info: KeyID 9AF8D0A9 Fingerprint CD27 CFB0 802C 0944 9CFD 804E C82C 8EB1