Hello,
I installed arpwatch, then added lines to /etc/syslog.conf:
but arpwatch messages are also saved in /var/log/messages.
So if I don't want to have arpwatch messages in /var/log/messages then I need to use !!arpwatch line...
Is this a proper way doing this?
Thanks
I installed arpwatch, then added lines to /etc/syslog.conf:
Code:
!arpwatch
*.* /var/log/arpwatch.log
but arpwatch messages are also saved in /var/log/messages.
So if I don't want to have arpwatch messages in /var/log/messages then I need to use !!arpwatch line...
Code:
!!arpwatch
*.notice;authpriv.none;kern.debug;lpr.info;mail.crit;news.err /var/log/messages
Is this a proper way doing this?
Thanks