/usr/share/doc/socklog/examples.html is in socklog 2.1.0-8.1.
This file is owned by root:root, with mode 0o644.
The actual contents of the file can be viewed below.
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131 132 133 134 | <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML//EN">
<html>
<head>
<title>socklog - examples</title>
</head>
<body>
<a href="http://smarden.org/pape/">G. Pape</a><br>
<a href="index.html">socklog</a><br>
<hr>
<h1>socklog - examples</h1>
<hr>
<h2>
listening on unix domain dgram socket <tt>/dev/log</tt>:
</h2>
<ul>
<li>a sample <tt>socklog-unix/run</tt> script:
<pre>
#!/bin/sh
exec 2>&1
exec chpst -Unobody socklog unix /dev/log
</pre>
<li>a sample <tt>socklog-unix/log/run</tt> script:
<pre>
#!/bin/sh
exec chpst -ulog svlogd \
main/main main/auth main/cron main/daemon main/debug main/ftp \
main/kern main/local main/mail main/news main/syslog main/user
</pre>
<li>sample log <tt>config</tt> files:
<pre>
# cat main/config
s999999
n10
# cat auth/config
s999999
n5
-*
+auth.*
+authpriv.*
# cat debug/config
s999999
n5
-*
+*.debug*
</pre>
<li>if you want additional
<a href="http://cr.yp.to/daemontools/tai64n.html">tai64n</a> time-stamps
prepended to each message, use this <tt>socklog-unix/log/run</tt> script
as example:
<pre>
#!/bin/sh
exec chpst -ulog svlogd -t \
main/main main/auth main/cron main/daemon main/debug main/ftp \
main/kern main/local main/mail main/news main/syslog main/user
</pre>
</ul>
<hr>
<h2>
listening on udp network socket <tt>0.0.0.0</tt>:<tt>514</tt>:
</h2>
<ul>
<li>a sample <tt>socklog-inet/run</tt> script is:
<pre>
#!/bin/sh
exec 2>&1
exec chpst -Unobody socklog inet 0 514
</pre>
<li>a sample <tt>socklog-inet/log/run</tt> script is:
<pre>
#!/bin/sh
exec chpst -ulog svlogd -t main/main
</pre>
</ul>
<hr>
<h2>
reading kernel messages from <tt>/dev/klog</tt> on BSD:
</h2>
<ul>
<li>a sample <tt>socklog-klog/run</tt> script on BSD:
<pre>
#!/bin/sh
exec </dev/klog
exec 2>&1
exec chpst -unobody socklog ucspi
</pre>
<li>a sample <tt>socklog-klog/log/run</tt>:
<pre>
#!/bin/sh
exec chpst -ulog svlogd -t main/main
</pre>
</ul>
<hr>
<h2>
A client for <a href="network.html">socklog network logging</a>:
</h2>
<ul>
<li>a sample <tt>socklog-unix/log/run</tt> script and log <tt>config</tt>
file that transmits the logs to a network logging server running the
<i>socklog-ucspi-tcp</i> service on <tt>10.0.0.16:10116</tt> is (you
need to have the <i>netcat</i> package installed):
<pre>
#!/bin/sh
exec chpst -ulog svlogd ./main/main
# cat main/config
s4096
n20
!tryto -pv nc -q0 10.0.0.16 10116
</pre>
</ul>
<hr>
<h2>
<a href="notify.html">log events notification</a> with <i>wall</i>:
</h2>
<ul>
<li>a sample <tt>socklog-notify/run</tt> script that uses
<i>wall</i> for notification is:
<pre>
#!/bin/sh -e
PIPE=/var/log/socklog/.notify
if [ ! -p "$PIPE" ]; then mkfifo -m0620 "$PIPE"; chown log:adm "$PIPE"; fi
exec <> "$PIPE"
exec chpst -ulog uncat -s49999 -t180 sh -c 'head | wall'
</pre>
</ul>
<hr>
<address><a href="mailto:pape@smarden.org">
Gerrit Pape <pape@smarden.org>
</a></address>
<small>$Id: examples.html,v 1.16 2003/08/09 16:15:38 pape Exp $</small>
</body>
</html>
|