Re: [SLE] SuSEfirewall2 & dmesg

On 20/07/06 07:30, Michael Nelson wrote:
Since I started running SuSEfirewall2, it constantly logs to the dmesg
buffer, making dmesg pretty much useless for anything other than looking
at iptables logs. I can look at that in syslog. I'd like my dmesg
buffer back. Is there a way to configure SuSEfirewall2 to not send
stuff into the dmesg buffer but instead only log to /var/log/messages?

I looked in /etc/sysconfig/SuSEfirewall but didn't see in there how to
accomplish this.
AFAIK, dmesg is only an agent to read the kernel ring buffer, which is
where everything from the kernel goes if it is to be logged anywhere.
That includes everything logged by iptables. Stuff that goes into the
buffer is then read by the syslog agent and written to the appropriate
file(s). In SuSE, the default syslog is syslog-ng, which is highly
configurable -- for example, with couple of filter definitions,
everything that is logged by iptables can be sent to a separate firewall
log file.

The SuSEfirewall is written so that everything that gets logged has a
prefix beginning SFW2. You can use this to read the kernel buffer
directly, but avoid having to read all the firewall entries: dmesg |grep
-v SFW2. Otherwise, your only recourse would seem to be to turn off all
firewall logging, which is something you probably do not wish to do.

--
Check the headers for your unsubscription address
For additional commands send e-mail to suse-linux-e-help@xxxxxxxx
Also check the archives at http://lists.suse.com
Please read the FAQs: suse-linux-e-faq@xxxxxxxx

Relevant Pages

  • Re: [Testers wanted] /dev/console cleanups
    ... Making dmesg a shell script that just cats that file satisfied everyone who asked. ... At least one BIOS SDK specifically describes this as a feature. ... One of which is specifying which chunks of memory should be preserved after a reboot, up to "memory tests should be as non-destructive as possible". ... the dmesg buffer is a simple ring buffer in the kernel. ...
    (freebsd-hackers)
  • Re: apm powershutown not working in 2.4.20-bf2.4
    ... > when I give it a shuddown we have to load the apm module with option ... > You may find more information in syslog or the output from dmesg ...
    (Debian-User)
  • Re: Dmesg is not showing whole boot list
    ... dmesg just dumps the kernel ring buffer which is of finite size. ...
    (Linux-Kernel)
  • Re: [BIKESHED] Giving abort(2) a reason
    ... ::>: syslog() or anything else using varargs is not going to work... ... ::>the kernel for only a malloc failure case... ... :You proposed 'put this into dmesg, with a lot of other stuff and then ... libc functions and/or provide a path through libc to implement the ...
    (freebsd-arch)
  • Re: [SLE] Intel e1000.o
    ... Fails - the output is: ... Hint <snip> syslog or dmesg ... There's nothing in dmesg that seems relevant and there doesn't seem to ...
    (SuSE)