Your intention, though, is to essentially alert you when the link status changes no? full_command works very well for this purpose. Otherwise, if you can figure out how to do it with the log file, by all means...
On Wed, Sep 7, 2011 at 10:32 AM, Eero Volotinen <[email protected]>wrote: > 2011/9/7 Jeremy Lee <[email protected]>: > > Try adding an OSSEC localfile full_command directive using one of the > > following commands listed in this thread (basically, ethtool or > mii-tool): > > > > http://lists.samba.org/archive/linux/2006-June/015442.html > > Sounds like bad solution? I think message "link up" and "link down" > shows on kernel message log. how to monitor this? > > -- > Eero >
