I am sorry for mislead , The product in NDM Direct:connect... I am look to
see if any one has that product instlled on LINUX, And if they are using
the syslog-ng to monitor files ...
John Summerfield
<[EMAIL PROTECTED]
homelinux.org> To
Sent by: Linux on [email protected]
390 Port cc
<[EMAIL PROTECTED]
ist.edu> Subject
Re: CONNECT using SYSLOG-NG
08/31/2006 09:56
AM
Please respond to
Linux on 390 Port
<[EMAIL PROTECTED]
ist.edu>
David Boyes wrote:
> You can read /var/log/xxxxx (where xxxx is the syslog category you chose
> to log the message) and do anything you like with it. Example:
>
> tail -f /var/log/messages | grep "CLOSE" | 'script to do something with
> the message'
>
> I don't recommend the above for large numbers of filters (the tail
> command is expensive for busy hosts -- you'd probably want to configure
> syslog to write the messages directly to a pipe for busy systems; see
> 'man syslogd.conf'), but you can experiment trivially with the above.
>
> This is what I suggested earlier when you were asking about VSFTP exits.
There's also the pop-before-smtp package, written in Perl, that does
exactly that. One could easily modify it to do other processing for
other messages.
--
Cheers
John
-- spambait
[EMAIL PROTECTED] [EMAIL PROTECTED]
Tourist pics http://portgeographe.environmentaldisasters.cds.merseine.nu/
do not reply off-list
----------------------------------------------------------------------
For LINUX-390 subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or
visit
http://www.marist.edu/htbin/wlvindex?LINUX-390
-----------------------------------------
This message and its attachments may contain privileged and
confidential information. If you are not the intended recipient(s),
you are prohibited from printing, forwarding, saving or copying this
email. If you have received this e-mail in error, please immediately
notify the sender and delete this e-mail and its attachments from your
computer.
----------------------------------------------------------------------
For LINUX-390 subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390