i have ipcop fw that syslogs its logs to an internal linux box at /var/logs/rsyslog/ipcop/messages
wanted to try psad as a fw analyzer. in the /etc/psad/psad.conf file there is a var that holds the value of the messages file location: ### ENABLE_SYSLOG_FILE Y; IPT_WRITE_FWDATA Y; #IPT_SYSLOG_FILE /var/log/messages; IPT_SYSLOG_FILE /var/log/rsyslog/ipcop/messages; ### will psad work if i change the default location of the messages file to where ipcop's message file is located? ------------------------------------------------------------------------------ This SF.net email is sponsored by Windows: Build for Windows Store. http://p.sf.net/sfu/windows-dev2dev _______________________________________________ psad-discuss mailing list psad-discuss@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/psad-discuss
