RE: Remote Syslogd

From: Ben Boulanger <ben(at)blackavar.com>
Date: Wed Nov 06 2002 - 14:20:52 EST

On Wed, 6 Nov 2002, John Fitzgerald wrote:
> ...seeing you mention logtail I guess you could use tail -f from a

You certainly could. The only thing that tail doesn't provide is some way of recovering if the process dies, gets killed, or otherwise gets interrupted. Logtail keeps track of where it left off, which is really the only reason to -not- use tail. Otherwise, if you have a way of protecting against such things, tail -f, a named pipe or even a socket would do the trick.

Ben

---

This list is provided by the SecurityFocus ARIS analyzer service. For more information on this free incident handling, management and tracking system please see: http://aris.securityfocus.com Received on Thu Nov 7 07:23:19 2002