search for: newsyslog

Hello, My entry for newsyslog in /etc/crontab is: 0 * * * * root newsyslog -t \%Y-\%m-\%d_\%H:\%M And I get: newsyslog: Could not convert time string to time value: No such file or directory I try to use the newsyslog from head to to avail. This solution was working a month ago (see Revision 248776) My file system...

...log file if it's above a certain size. Unfortunately, these messages accumulate so rapidly that this is not sufficient; the /var partition in the default install can easily be overflowed long before the log is rotated, causing malfunctions. I've temporarily changed /etc/crontab so that newsyslog is run every 5 minutes instead of once a day (which may be a good idea to prevent other denials of service via this sort of overflow as well). But it also makes sense to patch the system so that it does not fill so many verbose messages -- and/or to ignore the bogus queries generated by the sp...

Dear list! I have a little problem, trying to enable logging of deny rule. I have enabled it via kernel: options IPFIREWALL options IPFIREWALL_VERBOSE options IPFIREWALL_VERBOSE_LIMIT=3 It is ipfw2. After that, my inten- tion was to use syslogd and !ipfw *.* /var/log/ipfw.log and newsyslog with /var/log/ipfw.log 600 3 100 * J In rc.conf I have firewall_enable="YES" firewall_logging="YES" Well! Firewall works, I have data with "ipfw show", but there is no log. My intentioned rule is add 65535 deny log all from any to any It should work, but is...

I'm noticing something strange on two of my machines.. They're both 4.7-RELEASE-p3 i386 and they've both been up 150 days without any problems... /var/log/messages on each system contains only: Jun 9 12:00:01 in newsyslog[60291]: logfile turned over dmesg's output is truncated.. it periodically changes, but currently it reads: ite.net host=6532251hfc207.tampabay.rr.com [65.32.251.207] What's really weird, is yesterday the messages file also only contained the line about the log being turned over, but to...

...s affect the same jail that is running .. if I shutdown all jails on that physical server, everything shuts down except for that *one* jail, with a ps listing looking like: USER PID %CPU %MEM VSZ RSS TT STAT STARTED TIME COMMAND root 6670 0.0 0.0 9936 1372 ?? DsJ 3:00AM 0:00.01 newsyslog root 6815 0.0 0.0 9936 1288 ?? DsJ 3:00AM 0:00.01 /usr/sbin/newsyslog -f /usr/local/etc/rotate_logs.cfg root 8361 0.0 0.1 220740 11400 ?? DsJ 7:33PM 0:01.25 /usr/local/sbin/httpd -DNOHTTPACCEPT www 8364 0.0 0.0 0 0 ?? ZJ 7:33PM 0:00.00 <defunct> www 11866 0.0...

Using FreeBSD-7.2, I am attempting to configure the system newsyslog utility to rotate the dovecot.log file. I would prefer to use the system utility rather than the one described on the dovecot wiki for rotating the file. Unfortunately, it is not working. This is the error message that is spawned: newsyslog: illegal signal number in config file: /var/log/dovecot.l...

...conf I put the exim log path /var/log/exim/mainlog. I restarted dovecot and the process worked fine. However at midnight exim log file is rotated and since then dovecot stops logging to this log. In syslog.conf I put: mail.* /var/log/exim/mainlog And in newsyslog.conf I have: /var/log/exim/mainlog mailnull:mail 640 60 * @T00 Z I used to have an N flag next to Z but after reading the man I realized that its job is not to inform other processes about log creation. My qeustion is how do I set up things that dovecot and exim happily write to on...

Hi, I have a system which monitors 2 UPSs, and it runs upslog twice. I had a problem with newsyslog rotating the log file because upslog keeps it open (arguably a bug IMO), but it also has no way of changing the PID file so newsyslog can't HUP it when log rotating. Attached is a patch which allows you to specify the argument for writepid() so you can differentiate them easily. -- Daniel...

Hello, I'm useing freebsd 5.2.1 with icecast 2.0 and darkice 0.8 with a radiocard from avermedia 206 and a cmedia soundcard. i't works fine! just four points. 1. the ogg with vbr and a quality of 0.6 has a high tone in it. is there a known reason for? 2. filerecording works fine but how can i make every hour a new file without breaking the stream for listener? i thought

Hi all! I've decided to rotate the dovecot logs automatically on my freebsd 10.4 server using the system's newsyslog feature. I started with logfile.info putting the line /var/log/dovecot/logfile.info 600 31 * @T16 ZCU /var/run/dovecot/master.pid 30 which should send a SIGUSER to the master process, which it seems to do for I see in the log file: master: Warning: Sent SIGKILL to 1 log...

...clues as to what happened. Hardware failure? It is an old p-75 and the hard drive has had issues in udma-2 but has been doing fine for months in pio4 mode. I also have a cron job at 0:30 to move the apache logs to a tmp file restart apache sleep 5 minutes and then move the tmp file somewhere where newsyslog can catch it. According to the logs, apache restarted fine but the tmp files never made it anywhere. Again nothing useful in them either. So if this was a hardware failure (harddrive), then any kernel panic statements probably would not make it to the harddrive. So it would be hard to tell. My que...

Hello, For some time now have been trying to connect a Samba-3.0.14a-0.4 server running on SuSE Ent 9 linux server to our Exchange 2003 (running on Server 2003 Std w/ SP1) server which is also the AD server for our domain. I can connect to the shares using the AD as the authentication source, so the basic functionality is there but some command output does not show in the way i expect

...cache to memory cache, it does not imho disable it It seemed to do the trick. Behavior finally seems normal. The best evidence: At 10:00:00-ish I made the change in the config file and at 10:02:29 I restarted the server. It is now after 17:14 in Oakland and the logs are quiet. 09:00:06 host newsyslog[55292]: logfile turned over due to size>1000K 09:00:08 imap(user1): Warning: Maildir /mail/dom1.com/user1/: Expunged message reappeared, giving a new UID (old uid=3558585, file=1434383291.M430136P55004.host,S=2380,W=2423:2,) 09:00:08 imap(user1): Warning: Maildir /mail/dom1.com/user1/: Expunge...

...onnection to several ports.. In other words, a simple portscan.. yet, since my box has "log_in_vain" enabled, so it tries to log everything to /var/log/messages, since the logfile got full and the size went over 100K, it tried to rotate the log to save diskspace. (Apr 16 21:00:00 omikron newsyslog[32137]: logfile turned over due to size>100K) My server box is a Intel Celeron 733Mhz, 384Mb of RAM.. yet it's slow from time to time since I only run ATA66 due to the old motherboard. When this "attack" occured yesterday, the box almost died and the box were working 100%.. all us...

Hi, I have a suggestion for the logging part of the documentation website. It would be nice to have example configurations for the various alternatives that exist for the traditional (Linux) syslog daemons (sysklogd) appended to the Shorewall logging documentation. E.g. msyslog, newsyslog, syslog-ng, metalog. In a recent posting on the Gentoo-Security mailing list I sent my configuration for syslog-ng to log Shorewall messages into seperate logfiles. http://marc.theaimsgroup.com/?l=gentoo-security&m=106040714910563&w=2 Maybe others can post examples of their configuratio...

...imho disable it > > > It seemed to do the trick. Behavior finally seems normal. The best evidence: At 10:00:00-ish I made the change in the config file and at 10:02:29 I restarted the server. > > It is now after 17:14 in Oakland and the logs are quiet. > > 09:00:06 host newsyslog[55292]: logfile turned over due to size>1000K > 09:00:08 imap(user1): Warning: Maildir /mail/dom1.com/user1/: Expunged message reappeared, giving a new UID (old uid=3558585, file=1434383291.M430136P55004.host,S=2380,W=2423:2,) > 09:00:08 imap(user1): Warning: Maildir /mail/dom1.com/user1/:...

Hi, On Fri, Jan 19, 2018 at 05:00:33PM +0100, Luciano Mannucci wrote: > I've decided to rotate the dovecot logs automatically on my freebsd > 10.4 server using the system's newsyslog feature. I started with > logfile.info putting the line > > /var/log/dovecot/logfile.info 600 31 * @T16 ZCU /var/run/dovecot/master.pid 30 > > which should send a SIGUSER to the master process, which it seems to > do for I see in the log file: > >...

hey, i need to know who deleted files on our server so i added the audit module. but now i cant find any hint in the log file which user deleted the file. it just shows me "Feb 6 13:54:57 smb.-server smbd_audit[13881]: opendir .recycle". How can i do that? another question is: how can i tell samba to keep more versions of the log files? Now it only keeps a client.log and a

Hello, It's a bit off topic, but I'm hoping someone has seen this before. I'm running a couple of headless boxes, one is 4.7 release, the other is 4.8 release. Both have the same issue with newsyslog when I've got the serial port enabled for console management. (-h in boot.conf and a getty running on cuaa0 after the boot process) Logrotate tries to send an HUP to syslogd, but it's not working properly. I get rotated logs, but they stay empty. If I "nuke" syslogd, and try to r...

Hello! How can I log dovecots messages into a separate file? Is it possible to set a custom syslog facility name somehow? I can't set the log file in dovecot because dovecot does not automatically rotate the logs like syslog does.. thank you! Dominik