summaryrefslogtreecommitdiff
path: root/sbin/pflogd
AgeCommit message (Collapse)Author
2006-12-08state that if the log file is bad, it is first moved out of the way. ifJoel Knight
that fails, then logging is suspended.
2006-12-06styleMichael Knudsen
2006-11-26repair missing DPADD requestsTheo de Raadt
2006-11-19Default snaplen has been 116 for a while now.Joel Knight
2006-10-26- sort optionsJason McIntyre
- sync usage()
2006-10-25Remove some unneeded externs. OK canacar@Moritz Jodeit
2006-10-25allow pflogd to listen on alternate pflog interfacesHenning Brauer
"Berk D. Demir" <bdd@mindcast.org> sent a diff in private, and then it evolved quite a bit... ok djm canacar berk
2006-03-06convert permanent privilege revocation to use setresuid/setresgid;Damien Miller
ok henning@
2006-01-15If the log file is invalid/incompatible, try to rename the bad log fileCan Erkin Acar
and continue with a new name instead of suspending. ok mcbride@
2005-07-04do not whack errno before using it; Andrey MatveevTheo de Raadt
2005-05-27filtering on ruleset name is already implemented, document it.Daniel Hartmeier
2005-04-14sync the list of acceptable values for 'reason' with realityJoel Knight
2005-02-09missing tzset(), noticed by Chris Kuethe <chris.kuethe@gmail.com>Henning Brauer
2005-01-08Use the handler specified in phandler instead of always usingCan Erkin Acar
dump_packet. Report and patch from Peter Postma, thanks.
2005-01-02"bad-timestamp" is a valid logging reason;Jason McIntyre
from joel knight;
2004-12-22also pass SIGINT/QUIT to child, from mpech@. ok avsm@Otto Moerbeek
2004-09-17ugly spacingTheo de Raadt
2004-08-13extra check for no message case; ok markus, deraadt, hshoexer, henningDamien Miller
2004-08-08spacingTheo de Raadt
2004-07-14no \n in errx(3)Henning Brauer
From: Andrey Matveev <andrushock@korovino.net>
2004-05-23use strtonum instead of atoi; dhartmei okTheo de Raadt
2004-04-28fd leaks; henning okTheo de Raadt
2004-04-08sigh, really fix the error message this time, thanks Moritz JodeitAnil Madhavapeddy
2004-04-08reorder error message and send_fd in order to display the correctAnil Madhavapeddy
errno in error message; pointed out by Moritz Jodeit <moritz at jodeit.org>
2004-04-03dont close an invalid fd, canacar@ okAnil Madhavapeddy
2004-03-14Check return code of chdir() after chroot(); noted by Joris Vink, slight modOtto Moerbeek
from avsm@. ok avsm@ hshoexer@ henning@
2004-02-13cleanup signal handling; close descriptors.Otto Moerbeek
ok avsm@ millert@ canacar@
2004-01-18Create log files if they do not already exist, but do not followCan Erkin Acar
symlinks. ok markus@
2004-01-16- standard option orderJason McIntyre
- sync usage() - new sentence, new line - Dv (not Va) for signals - other nits ok canacar@
2004-01-15Try to preserve the integrity of the log file in case of errors/unexpectedCan Erkin Acar
shutdowns etc. Also check logfile integrity on startup and suspend logging if an inconsistency is detected. ok dhartmei@
2004-01-15Synchronize with syslogd privsep: When reading a new command fails,Can Erkin Acar
terminate the loop instead of exiting directly, suggested by avsm@ Also get rid of trailing comma in enum, makes lint(1) happier, from Andrey Matveev andrushock at korovino dot net
2003-11-20remove -Werror from userland builds, to give us a chance toAnil Madhavapeddy
use more verbose warning options if desired. ok millert@, henning@, david@
2003-10-22spacingTheo de Raadt
2003-10-22use setgroups too; canacar okTheo de Raadt
2003-10-22caution with killTheo de Raadt
2003-10-22privilege seperated pflogdCan Erkin Acar
_pflogd user and group must be created for proper operation. ok frantzen@ henning@ mcbride@ deraadt@
2003-09-26Walking up to a firewall box which had the console logged in, to seeTheo de Raadt
the entire screen full of "Reopened logfile" is CLEAR and OBVIOUS reason that that message is UTTERLY USELESS and is wiping important stuff off the screen.
2003-08-22pf spelling policeDavid Krause
ok dhartmei@ jmc@
2003-06-03- section reorderJason McIntyre
- some mdoc fixes
2003-05-14pflogd now uses the new pflog link type. Trying to append to an existingCan Erkin Acar
old-style logfile will fail. Move away old log files. ok henning@ dhartmei@ frantzen@
2003-04-23most programs do not syslog at startup. especially this oneTheo de Raadt
2003-03-11mdoc fixes: macros are not allowed inside .Bd -literal blocksDavid Krause
ok deraadt@
2003-03-11always compile and set pcap filters even when filters are not specified.Kenjiro Cho
bpf implements snaplen by filters and captures full packets when filters are not set. ok deraadt@, dhartmei@
2003-03-01Add ANSI prototypes. Get rid of shadow warnings. Use correctChad Loder
printf format specifiers where needed. Clarify one comment. Now compiles with -Wmissing-prototypes -Wshadow, and this is reflected in the Makefile. OK deraadt@
2003-02-24to toHenning Brauer
found by krause
2003-02-19mdoc-police: officer krause catched one againHenning Brauer
2003-02-14and one more tweaking round by krause, thanks!Henning Brauer
2003-01-28typos; added white boldface to examplesJason McIntyre
ok deraadt@
2002-11-30oopsTheo de Raadt
2002-11-30do not syslog with extra newlineTheo de Raadt