Example 2.20. Rate limit log flow to five logs per second
:/> logsnoop -on -rate=5
Example 2.21. Show logs from the memlog buffer
:/> logsnoop -on -source=memlog
Example 2.22. Show logs having a source IP value
:/> logsnoop -on -srcip=0.0.0.0/0
Example 2.23. Show logs having a severity of warning or higher
:/> logsnoop -on -severity=warning
Usage
logsnoop -on [-source={MEMLOG | REALTIME | BOTH}]
[-category=<String>] [-logid=<Integer>] [-event=<String>]
[-action={NONE | DROP | ALLOW | BLOCK | REJECT |
<String>}] [-severity={EMERGENCY | ALERT | CRITICAL |
ERROR | WARNING | NOTICE | INFO | DEBUG}]
[-starttime=<DateTime>] [-endtime=<DateTime>]
[-pattern=<String>] [-srcip=<IPAddress>]
[-destip=<IPAddress>] [-srcport=<0...65535>]
[-destport=<0...65535>] [-srcif=<Interface>]
[-destif=<Interface>] [-ipproto={TCP | UDP | ICMP |
<String>}] [-rate=<Integer>] [-num=<Integer>]
Start log session.
logsnoop -off
Stop log session.
logsnoop
Show log snoop status.
Options
-action={NONE | DROP | ALLOW | BLOCK
| REJECT | <String>}
Log action to filter on.
-category=<String> Log category to filter on.
Chapter 2: Command Reference
99
To Next Page
Loading...
