From: Patrick E. <mai...@pa...> - 2005-04-22 20:48:36
|
On Fri, 22 Apr 2005 16:30:03 +0200, Kris Deugau <kd...@vi...> wrote: > Patrick Erler wrote: >> config (DEBIAN 3.0/DEBIAN 3.1): >> >> bandwidth monitoring using shorewall >> logrotate enabled >> logcheck enabled >> >> bandwith monitoring rules are logging to syslog. in my case it filled >> >> /var/log/bandwidth >> /var/log/debug (why this?) >> /var/log/syslog > > Part of your problem is Debian's default syslog configuration - it logs > **EVERYTHING** (very VERY literally!) to several places. I've yet to > figure out how this is useful, good, or desireable. > right, but i have the feeling that this is somehow a good thing (TM). at least it fits my own feelings about handling data. storage space is cheap, so i myself tend to rather save something twice instead of missing data later i deleted because i thought it's not important at that time (think cracks, think "what's happend to the mail i definitely got, you bastard operator from hell!") on the other hand i like to keep my servers as distro-standard as possible and it's possible that this is not the way it is intended in debian. your opinion? > > (I won't go into my opinions on Debian's default log rotation system.) could you tell? PAT |