On May 28 15:53:03, Jan Stary wrote:
> Byt the pflogd(8) manpage, the '-x' option can be used
> to check the integrity of an existing logfile.
>
> Is there a way to tell whether pflogd did find
> the file to be OK or not? For example:
>
> # pflogd -x -f /var/log/pflog
> # echo $?
> 0
>
> # echo foo > /tmp/bar
> # pflogd -x -f /tmp/bar
> # echo $?
> 0
>
> Am I missing something?
Ah, it's in /var/log/daemon. Duh.
Anyway, would there be a benefit in returning >0
if the file is not consistent?
Also, is this tcpdump's job, really?
What would be a typical use of 'pflogd -x' in real life?
Thanks
Jan