On Thu, Jan 28, 2016 at 10:31 AM, sven falempin <sven.falem...@gmail.com> wrote: > syslog has memory buffer that rotates. (:name:size) > pflogd can log, tcpump | logger is you want something else > > problem solved.
Thanks. I should have thought of pflogd! Looks like a modification of the standard OpenBSD technique to shoot that into syslog will work. -- "You should sit in nature for 20 minutes a day. Unless you are busy, then you should sit for an hour" - Zen Proverb