Re: Log Files

[hypnos <hypnos@m-net.arbornet.org>]

On Wed, 29 Dec 1999, Ryan M. Golbeck wrote:

> 	I'm setting a home network with Debian Linux as the firewall/ipmasq
> server, as well as with a Debian Linux workstation in the internal network.
> I want to centralize all the logs the server generates onto the workstation,

>From 'man syslog.conf':

   Remote Machine
       This syslogd(8) provides full remote logging, i.e. is able
       to  send  messages to a remote host running syslogd(8) and
       to receive messages from remote  hosts.  The  remote  host
       won't  forward  the  message  again, it will just log them
       locally. To forward messages to another host, prepend  the
       hostname with the at sign (``@'').

       Using  this feature you're able to control all syslog mes-
       sages on one host, if all other machines will log remotely
       to that. This tears down administration needs.

There are examples in the man page of how to implement this.

> and use a program that will go through these logs and report connection
> attempts and other activity of that sort.

There are many log analyzers out there, but I don't use any
so I won't recommend any.  An alternative would be to make
a shell script that pulls out all the information you want
and save it to another file.

------------------------------------------------------
hypnos              <mailto:hypnos@m-net.arbornet.org>