HP Visualize J210XC IRIX to HP-UX Migration Guide - Page 68

Configuring rwhod, Configuring Logging for the Internet Services

Page 68 highlights

Configuring TCP/IP Configuring rwhod The rwhod daemon checks the state of your host and generates status messages, which it broadcasts on the network every 180 seconds. It also listens for status messages broadcast by rwhod daemons on remote hosts, and it records these messages in a database of files in /var/spool/rwho. The files are named whod.hostname, where hostname is the name of the remote host from which the status information came. The status messages are displayed when users issue the rwho or ruptime command. 1. In the /etc/rc.config.d/netdaemons file, set the RWHOD variable to 1. 2. Issue the following command to start the rwhod daemon: # /sbin/init.d/rwhod start Status information collected by rwhod for the local host and from each remote host includes the following: • System load average • Host name as returned by gethostbyname • Users logged in • Time of last activity for logged-in users Because User Datagram protocol (UDP) broadcasts do not go through gateways, rwho and ruptime do not report status for hosts that can be reached only through a gateway. Configuring Logging for the Internet Services syslogd The Internet daemons and servers log informational and error messages through syslog. You can monitor these messages by running syslogd. You can determine the type and extent of monitoring through syslogd's configuration file, /etc/syslog.conf. Each line in /etc/syslog.conf has a selector and an action. The selector tells which part of the system generated the message and the message's priority. The action specifies where the message should be sent. The part of the selector that tells where a message comes from is called the facility. All Internet daemons and servers, except sendmail, log messages to the daemon facility. sendmail logs messages to the mail facility. syslogd logs messages to the syslog facility. You may indicate all facilities in the configuration file with an asterisk (*). The part of the selector that tells what priority a message has is called the level. Selector levels are debug, information, notice, warning, error, alert, emergency, and critical. A message must be at or above the level you specify in order to be logged. The action allows you to specify where messages should be directed. You can have the messages directed to files, users, the console, or to a syslogd running on another host. The following is the default configuration for /etc/syslog.conf: mail.debug /var/adm/syslog/mail.log *.info,mail.none /var/adm/syslog/syslog.log *.alert /dev/console *.alert root *.emerg * With this configuration, all mail log messages at the debug level or higher are sent to /var/adm/syslog/mail.log. Log messages from any facility at the information level or higher (but no mail 63

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82
  • 83
  • 84
  • 85
  • 86
  • 87
  • 88
  • 89
  • 90
  • 91
  • 92
  • 93
  • 94
  • 95
  • 96
  • 97
  • 98
  • 99
  • 100
  • 101
  • 102
  • 103
  • 104
  • 105
  • 106
  • 107
  • 108
  • 109
  • 110
  • 111
  • 112
  • 113
  • 114
  • 115
  • 116
  • 117
  • 118
  • 119
  • 120
  • 121
  • 122
  • 123
  • 124
  • 125

Configuring TCP/IP
63
Configuring rwhod
The
rwhod
daemon checks the state of your host and generates status messages, which it broadcasts on the
network every 180 seconds. It also listens for status messages broadcast by
rwhod
daemons on remote
hosts, and it records these messages in a database of files in
/var/spool/rwho
. The files are named
whod.
hostname
, where
hostname
is the name of the remote host from which the status information came.
The status messages are displayed when users issue the
rwho
or
ruptime
command.
1.
In the
/etc/rc.config.d/netdaemons
file, set the
RWHOD
variable to
1
.
2.
Issue the following command to start the
rwhod
daemon:
# /sbin/init.d/rwhod start
Status information collected by
rwhod
for the local host and from each remote host includes the
following:
System load average
Host name as returned by
gethostbyname
Users logged in
Time of last activity for logged-in users
Because User Datagram protocol (UDP) broadcasts do not go through gateways,
rwho
and
ruptime
do not
report status for hosts that can be reached only through a gateway.
Configuring Logging for the Internet Services
syslogd
The Internet daemons and servers log informational and error messages through
syslog
. You can monitor
these messages by running
syslogd
. You can determine the type and extent of monitoring through
syslogd’s
configuration file,
/etc/syslog.conf
.
Each line in
/etc/syslog.conf
has a
selector
and an
action
. The selector tells which part of the system
generated the message and the message±s priority. The action specifies where the message should be sent.
The part of the selector that tells where a message comes from is called the
facility
. All Internet daemons
and servers, except
sendmail
, log messages to the daemon facility.
sendmail
logs messages to the
mail
facility.
syslogd
logs messages to the
syslog
facility. You may indicate all facilities in the configuration file
with an asterisk (
*
).
The part of the selector that tells what priority a message has is called the
level
. Selector levels are
debug
,
information
,
notice
,
warning
,
error
,
alert
,
emergency
, and
critical
. A message must be at or above the
level you specify in order to be logged.
The
action
allows you to specify where messages should be directed. You can have the messages directed
to files, users, the console, or to a
syslogd
running on another host.
The following is the default configuration for
/etc/syslog.conf
:
mail.debug /var/adm/syslog/mail.log
*.info,mail.none /var/adm/syslog/syslog.log
*.alert /dev/console
*.alert root
*.emerg *
With this configuration, all mail log messages at the
debug
level or higher are sent to
/var/adm/syslog/mail.log
. Log messages from any facility at the
information
level or higher (but no mail