HP-UX IPFilter Version A.03.05.14 Administrator's Guide

Firewall Building Concepts
Logging Techniques
Chapter 470
Logging Techniques
The log keyword tells IPFilter to log packets matching the rule to the
IPFilter logging device, /dev/ipl. To read the log, run the ipmon utility.
See “The ipmon Utility” on page 93 for more information. You can use the
ipmon -s command to log the information in /dev/ipl to syslog.
You can use the following advanced options with the log keyword to
refine the log IPFilter creates.
level log-level
You can control the level of logging IPFilter does by using the level
log-level option with the log keyword.
The syntax for level is:
log level facility . priority | priority
The options available for facility are:
The options available for
priority are:
kern user mail
daemon auth syslog
lpr news uucp
cron ftp authpriv
audit logalert local0
local1 local2 local3
local4 local5 local6
local7
emerg alert crit
err warn notice
info debug