/var/log/messages filling up with DHCPDISCOVER messages

[Jeff Royle]

Stephen Allen wrote:
> /usr/local/etc/dhcpd.conf is configured with
> 
>      "log-facility local7;"
> 
> and /etc/syslog.conf is also configured with
> 
>      "local7.*  /var/log/dhcpd.log"
> 
> However, /var/log/messages is filling up with "DHCPDISCOVER / no free
> leases" messages for those clients that are unknown to the DHCP server
> (eg. on a different subnet).  I suspect that these messages are being
> caught by "*.notice" which is why they end up in /var/log/messages.
> 
> Is there a way to prevent this happening?

You could try filtering them out of syslog like so (in your syslogd.conf):

"local7.!=notice  /var/log/dhcpd.log"

Which should log everything for local7 except notice. See man syslog.conf(5)

Cheers,

Jeff Royle
lists dot qwirky dot net