Re: [Sshguard-users] syslog compression freebsd

[<li...@la...>]

When in doubt, boot! So yes, I restarted. 

I have to say I never put two identical flags on a command, so this certainly is a first. 

Here is the double dash c discussed :

http://www.syslog.org/forum/syslog-and-syslogd/how-to-set-syslog-to-not-sho-'last-message-repeatedandquo/‎

  Original Message  
From: Willem Jan Withagen
Sent: Wednesday, September 2, 2015 12:30 AM
To: ssh...@li...
Reply To: ssh...@li...
Subject: Re: [Sshguard-users] syslog compression freebsd

On 2-9-2015 02:02, li...@la... wrote:
>
> I noticed the post regarding syslog compression. I put this in
> rc.conf, just addding the dash c to the syslogd_flags:
>
> syslogd_enable="YES" # Run syslog daemon (or NO).
> syslogd_program="/usr/sbin/syslogd" # path to syslogd, if you want a
> different one.
> syslogd_flags="-s -c" # Flags to syslogd (if
> enabled).
>
> But I still get compression.
>
> Sep 1 05:58:42 theranch sshd[3218]: error: PAM: authentication error
> for root from 221.203.142.71 Sep 1 05:58:43 theranch last message
> repeated 2 times

Trivial question, but just to make sure:
You did restart syslogd?

'service syslogd restart'

--WjW



------------------------------------------------------------------------------
Monitor Your Dynamic Infrastructure at Any Scale With Datadog!
Get real-time metrics from all of your servers, apps and tools
in one place.
SourceForge users - Click here to start your Free Trial of Datadog now!
http://pubads.g.doubleclick.net/gampad/clk?id=241902991&iu=/4140
_______________________________________________
Sshguard-users mailing list
Ssh...@li...
https://lists.sourceforge.net/lists/listinfo/sshguard-users