acct, logacct and grp must not contain any special characters.
Running socklog-conf with the 1st argument unix, socklog-conf creates the service directory /etc/socklog/unix and the log directory /var/log/socklog.
socklog-conf arranges for socklog(8) to run under the uid and gid of acct and to listen for syslog messages on /dev/log.
It also creates automatically rotated log directories in /var/log/socklog. The logs are owned by logacct. The corresponding multilog(8) processes run under the uid and gid of logacct.
You can run the service under svscan(8) by creating a symbolic link in the service directory:
ln -s /etc/socklog/unix /service/socklog-unix
Running socklog-conf with the 1st argument inet, socklog-conf creates the service directory /etc/socklog/inet and the log directory /var/log/socklog-inet.
socklog-conf arranges for socklog(8) to run under the uid and gid of acct and to listen for syslog messages on the UDP socket 0.0.0.0:514.
It also creates automatically rotated log directories in /var/log/socklog-inet. The logs are owned by logacct. The corresponding multilog(8) processes run under the uid and gid of logacct.
You can run the service under svscan(8) by creating a symbolic link in the service directory:
ln -s /etc/socklog/inet /service/socklog-inet
Running socklog-conf with the 1st argument klog, socklog-conf creates the service directory /etc/socklog/klog and the log directory /var/log/socklog-klog.
socklog-conf arranges for socklog(8) to run under the uid and gid of acct and to read kernel messages from /proc/kmsg on Linux, or /dev/klog on BSD.
It also creates automatically rotated log directories in /var/log/socklog-klog. The logs are owned by logacct. The corresponding multilog(8) processes run under the uid and gid of logacct.
You can run the service under svscan(8) by creating a symbolic link in the service directory:
ln -s /etc/socklog/klog /service/socklog-klog
Running socklog-conf with the 1st argument ucspi-tcp, socklog-conf creates the service directory /etc/socklog/ucspi-tcp and the log directory /var/log/socklog-ucspi-tcp.
socklog-conf arranges for tcpserver(1) to run socklog(8) under the uid and gid of acct and to listen on the TCP socket 0.0.0.0:10116.
It also creates automatically rotated log directories in /var/log/socklog-ucspi-tcp. The logs are owned by logacct. The corresponding multilog(8) processes run under the uid and gid of logacct.
You can run the service under svscan(8) by creating a symbolic link in the service directory:
ln -s /etc/socklog/ucspi-tcp /service/socklog-ucspi-tcp
Running socklog-conf with the 1st argument notify, socklog-conf creates the service directory /etc/socklog/notify.
socklog-conf arranges for uncat(1) to run under the uid and gid of acct and to listen on the named pipe /var/log/socklog/.notify. The named pipe will have mode 0620, the uid of acct and the gid of grp.
All uids running a log service that is configured to push log events to the socklog-notify service must be member of the group grp.
You can run the service under svscan(8) by creating a symbolic link in the service directory:
ln -s /etc/socklog/notify /service/socklog-notify
http://smarden.org/socklog/
http://cr.yp.to/daemontools.html