Re: What's wrong with ipmon?

[herbert langhans <herbert.raimund%langhans.com.pl@localhost>]

On Mon, May 14, 2012 at 10:17:27AM +0200, Manuel Bouyer wrote:
> On Mon, May 14, 2012 at 12:05:20AM +0200, herbert langhans wrote:
> > Hi Listers,
> > I am fighting for hours with ipmon.
> > 
> > After I had set up the ipfilter with a quite extensive /etc/ipf.conf I
> > wanted to have the results in a logfile. Whatever I do - ipmon doesnt
> > generate any output.
> > 
> > Since I wasnt sure about logging the output over syslog (to avoid
> > possible configuration errors in syslog.conf) I tried the direct way
> > by invoking:
> > #ipmon -Dnf /home/herbs/ipf.log
> > 
> > Nothing there. The ipfilter is working (ipfstat shows that) and an empty
> > ipf.log exists too. Something is wrong. I also tried to set it in 
> > /etc/rc.d to ipmon=YES - no log data ...
> > 
> > What am I doing wrong?
> 
> check that your kernel has
> options IPFILTER_LOG
> (it's on by default in i386 and amd64 GENERIC, I didn't check others)
> 
> -- 
> Manuel Bouyer <bouyer%antioche.eu.org@localhost>
>      NetBSD: 26 ans d'experience feront toujours la difference
> --

It definitely has is on (no # ahead)- it spits out:
...
options         IPFILTER_LOG    # ipmon(8) log support
...

(quite adventurous, these kernel options)

There should be everything right for the ip-logging. I really wonder if
its not a bug in 5.1 ... What else could be wrong?

Thanks!
herb langhans

-- 
sprachtraining langhans
herbert langhans, warschau
herbert.raimund[at]gmx.net
herbert[at]langhans.com.pl
http://www.langhans.com.pl
+0048 603 341 441

| jabber:herbs
| icq:414500866
| yahoo_im:herbert.raimund