|
drop.conf − Configuration file for drop |
|
All commandline options of drop can be set in a config file. The commandline options have a higher precendence. If not specified with the −c option the file drop.conf is searched in the acutal directory. The entries are separated by colons or equal sign: keyword: value keyword= value All line entries after the # sign are treated as a comment and were ignored. If this sign is required you can escape it with a backslash (\): keyword: va\#lue # comment If the first and last character of value are a quote or double quote these characters are stripped and all between is used. This is useful for either empty values or values with white spaces: ´spa ce´ = "spa ce" = spa ce The keywords are case insensitive. |
|
AlarmDelay: time |
|
Specifies on which intervals (in seconds) the program checks for the presence of alerts. The default is 5 minutes. |
|
AlarmLevel: level |
|
If level alerts have arrived a mail is sent regardless of AlarmDelay. The default is 0 which disables this feature. |
|
DaemonMode: value |
|
A non−zero value enables daemon mode, the program starts into the background. This automatically activates the Syslog option.TP FQNNames: value A non−zero value enables resolving of full qualified names of the reporting sensor. To reduce CPU usage this values are cached in a list. |
|
MailServer: name |
|
Specifies the server which should be used for relaying. The default server is localhost. |
|
MailPort: number |
|
Specifies the port number on which we can reach the mail server. This defaults to port 25. |
|
MailRecipient: address |
|
Sets the address of one recipient of the mails. This option can be used several times to get a list of recipients. |
|
MailSender: address |
|
Sets the address of the sender of the emails. |
|
MailDomain: domainname |
|
Specifies the domain name which should be used in a mail session on startup (HELO string). |
|
MaxCount: count |
|
Specifies the maximum number of tries to connect to the mailserver and deliver mails. After count tries the program drops all alerts to stdout or syslog |
|
PIDFile: <PIDFile> |
|
Specifies which file should be used to store the pid. This file must be writeable by the user running alert! |
|
SocketName: <socket> |
|
Specifies which socket should be created so servsock(8) can use it. The default is /tmp/drop. |
|
Syslog: value |
|
A non−zero value enables logging to syslog. The facility is LOCAL0 and the level is LOG_INFO. |
|
Umask: mode |
|
Sets the umask to mode for the daemon mode. This affects the mode for the created unix socket and pid file. The mode can be either given in ascii, octal (with leading 0) or hex (with leading 0x). |
|
DaemonDir: dir |
|
Sets the working dir in daemon mode to dir. The default is to use the current working directory. It is useful to choose "/" to avoid using mounted filesystems. |
|
Debug: area,level |
|
Activate debug output for area (see README.debug) for informations up to level. A value of ALL activates all areas, level should be between 0 (disabled) and 9 (maximum output). This option can be used several times for different values. |
|
/tmp/drop (unix socket) |
|
drop(8), alert(8) |