In addition to apologies to Mr. Norman, perhaps there's some value in either (1) making tcplogd etc. require enough configuration to force people to read the documentation, or (2) enhance those packages to interpret things a little more, so they scare naive users a bit less?