Traffic Logging Questions

[agilani]

I want to enable traffic logging under firewall. Does anyone know where these files are saved/stored? I see the settings under tools -> other settings where I can set a custom traffic location, but I don't think that applies to the firewall logs does it?

Alternately can I just send the traffic logs to my syslog server?

Any guidance or advice would be appreciated.

 

[ColinTaylor]

I want to enable traffic logging under firewall.

Are you referring to "Logged packets type"? That does not log traffic, it logs dropped or accepted packets depending on the setting. It will show up in the syslog (System Log > General Log)

 

[agilani]

Thanks, yes that is what I was referring to. Is there any way to change that to log only to the syslog server? Or change it to store it to USB? I don't want to fill up my /tmp directory with this.

 

[ColinTaylor]

No you can't send just those entries elsewhere. All you can do is send the entire syslog to a remote server (I haven't tried it myself).

You won't fill up /tmp because the syslog has a limit on how big it can grow, 256k I think.