File: kmsgsd.conf

package info (click to toggle)
psad 1.4.8-1
  • links: PTS
  • area: main
  • in suites: etch, etch-m68k
  • size: 4,756 kB
  • ctags: 1,878
  • sloc: perl: 28,425; ansic: 8,323; makefile: 1,875; sh: 287
file content (31 lines) | stat: -rw-r--r-- 1,422 bytes parent folder | download
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
#
###########################################################################
#
#  This is the configuration file for psad kmsgsd daemon (for more
#  information, read the kmsgsd man page).  Normally this file gets
#  installed at /etc/psad/kmsgsd.conf, but can be put anywhere in the
#  filesystem and then the path can be specified on the command line
#  argument "-c <file>" to kmsgsd.  The syntax of this file is as follows:
#
# -Each line has the form  "<variable name>    <value>;".  Note the semi-
#  colon after the <value>.  All characters after the semicolon will be
#  ignored to provide space for comments.
#
###########################################################################
#
# $Id: kmsgsd.conf 806 2003-09-13 01:36:53Z mbr $
#

### The following variables can be modified to look for logging messages
### that are specific to your firewall configuration (specified by the
### "--log-prefix" for iptables firewalls).  For example, if your firewall
### uses the string "Audit" for packets that have been blocked, then you
### could set FW_MSG_SEARCH = "Audit";
FW_MSG_SEARCH               DROP;
SNORT_SID_STR               SID;  ### for snort "sid" values generated
                                  ### by fwsnort or snort2iptables

### Files
FW_DATA_FILE                /var/log/psad/fwdata;
KMSGSD_PID_FILE             /var/run/psad/kmsgsd.pid;
PSAD_FIFO                   /var/lib/psad/psadfifo;