David Boyes wrote:
You can read /var/log/xxxxx (where xxxx is the syslog category you chose
to log the message) and do anything you like with it. Example:
tail -f /var/log/messages | grep "CLOSE" | 'script to do something with
the message'
I don't recommend the above for large numbers of filters (the tail
command is expensive for busy hosts -- you'd probably want to configure
syslog to write the messages directly to a pipe for busy systems; see
'man syslogd.conf'), but you can experiment trivially with the above.
This is what I suggested earlier when you were asking about VSFTP exits.
There's also the pop-before-smtp package, written in Perl, that does
exactly that. One could easily modify it to do other processing for
other messages.
--
Cheers
John
-- spambait
[EMAIL PROTECTED] [EMAIL PROTECTED]
Tourist pics http://portgeographe.environmentaldisasters.cds.merseine.nu/
do not reply off-list
----------------------------------------------------------------------
For LINUX-390 subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390
