![ttyrpld [rusty colors]](title.png)
| Main page | Installing | ttyreplay(1) | rpl(4) | rpldev(4) | ttyrpld(7) | rplctl(8) | rpld(8) | Network Logging | ttyrpld 1.00 |
| Description > |
There is a simple way on how to scoop /dev/rpl data directly to another host without logging it on the one where it was captured. This is commonly referred to as "network logging". |
|
| Setup > |
On the storage host, create a FIFO which will server as a routing point, and start rpld on it: # mkfifo /dev/transrpl On the capture host, load the module at a known minor number, and create a device node. Set up an SSH public key so you do not need to enter a password. Exploit the fact that SSH can be like telnet, i.e. disabling any tty control and let it be "just a socket file descriptor": # modprobe rpldev GI_minor=37 Note: rpld will start once the FIFO has been successfully opened. This is due to opening FIFOs blocks when there is no reader/writer. Note: The SSH program will terminate when rpld does, since once rpld closes the FIFO and SSH tries to write to it, SSH gets a SIGPIPE and does not catch it. That's ok, though. Note: You technically can, but in practice can not, copy /dev/rpl to a regular file, since no timestamps will be recorded in that operation. Only rpld will do so, and as such, rpld is dependant on something that blocks when there is no data, such as a FIFO, as outlined above. |
|