Re: changing debuglevel of kernel messaging going to console

On Thu, Feb 17, 2005 at 04:56:09PM +0300, Gleb Smirnoff wrote:
>   Dear collegues,
> 
> now all kernel messages are printed to system console by default:
> 
> *.err;kern.debug;auth.notice;mail.crit          /dev/console
> 
> There is a problem that in case of a serial console, this printing
> is very slow and heavily pessimizes box performance, when kernel
> messages are printed at high speed. Moreover, several kernel messages
> with LOG_DEBUG severity can be triggered remotely, for example
> sending bogus ARP replies. So, sending bogus ARP packets to a
> FreeBSD box with serial console may lead to a DoS like conditions.

I've always been bothered by *any* output going to the console, because
the only time I'm at the console is when I'm fixing the problem that the
kernel is complaining about in the first place. My local solution is to
create a /var/log/kernel and send kern.everything to it. As for changing
the default, I do agree fully with a change to kern.warning, but I'm not
going fight very hard for it.

-Craig 

> 
> I'd like to raise this level to kern.warning, so that important
> messages are still printed, but debug messages won't flood console.
> No logging will be lost, since next line logs kern.debug to
> /var/log/messages.
> 
> -- 
> Totus tuus, Glebius.
> GLEBIUS-RIPN GLEB-RIPE