(Thursday 20 June 2002 10:27 am) Duane Dunston wrote: > Depending on the distro you are using the syslogd daemon doesn't > understand the "space" between the syslog facility and action. ^^^^^^ you mean level ? yes facilities and levels are separated with dot, read syslog.conf(5) for more explanations > The "-" is used for it to understand the difference between the facility and > action. Else it will think "kern.*" and "/var/log/newfile" is this: > "kern.*/var/log/newfile" which is not a valid syslog facility. nope....the "-" character just before the arguments (in this case is a file) is used by syslog to do syncing (direct writes) to disk, rather than queue up first in the buffers (in case your hardware crashing and you might loosing important logs), so if performance is your choice over data integrity, you may ommit the "-" character. regards -- Diyan Christian @ IN SOA lug.stikom.edu. oblek.lug.stikom.edu. "With great power, comes a great responsibility" - Ben Parker - ------------------------------------------------------------------------ To unsubscribe email security-discuss-request@linuxsecurity.com with "unsubscribe" in the subject of the message.