In the standard configuration it sends all reports to /var/log/messages. Unless you
changed the logging facility which it uses during the configuration all your
portsentry reports should be listed there. I understand that there is a way to
redirect it's reports but I have been unable to get it working. Some of the more
experienced users might be able to help with that one. I would actually be very
interested to find out how to change it's logging properties. Portsentry dumps too
much clutter into the messages file for me to look past when I'm reviewing my weekly
logs.
Regards
- Ben
------Original Message------
From: Dennis Myers <[EMAIL PROTECTED]>
To: [EMAIL PROTECTED]
Sent: January 1, 2001 4:42:29 AM GMT
Subject: [newbie] Portsentry reporting
Hi again everyone, this has been puzzling me for a while. I have portsentry
installed and configured on two machines (in conjunction with pmfirewall) and
have not been able to determine where to look for reports on possible attacks
or unauthorized access attempts. Where should I look for this information?
Does portsentry send e-mail to root? Thanks for any info available.
--
Dennis M.
Registered Linux user #180842
______________________________________________
FREE Personalized Email at Mail.com
Sign up at http://www.mail.com/?sr=signup
