Page 1 of 1

Let grsec log to another file

PostPosted: Tue Feb 08, 2005 11:02 am
by Ace
Is it possible to let only grsec logs write to another file than /var/log/messages? I want to run an iptables antidos script (of apf) which parses /var/log/messages for iptables output, but I'm afraid it will not see some logs as it gets flooded by the chdir() logs..

Thanks
Fréderic

PostPosted: Thu Feb 10, 2005 9:35 pm
by onyx
I think it cannot, but why don't you try syslog-ng, which can match on strings, for example "grsec" and "PAX", so you can log theese where you like to.

PostPosted: Fri Feb 11, 2005 6:49 am
by Ace
oh that's right :) forgot about syslog :)

thanks for the hint
Ace