Statistics on number of users in 24h period

Brett Charbeneau brett at
Thu Sep 12 16:11:24 UTC 2013

	Great information and suggestions, Keith!
	And I think you're right on target with the central logging machine for 
this purpose.
	I'm grateful for your help!

Brett Charbeneau, GSEC Gold, GCIH Gold
Network Administrator
Williamsburg Regional Library
7770 Croaker Road
Williamsburg, VA 23188-7064
(757)259-4079 (fax)    brett at

On Thu, 12 Sep 2013, Neufeld, Keith wrote:

NK> > This is the exact tree I was trying to bark up, but I can't seem to get 
NK> > DD-WRT's implementation of DHCP (purported to be 4.1-ESV-R2-1) to log at that 
NK> > level.
NK> We have in dhcpd.conf:
NK> 	log-facility local1;
NK> and then in /etc/syslog-ng/syslog-ng.conf:
NK> 	destination d_logh { tcp("" port(5140)); };
NK> 	destination dhcplog { file("/var/log/dhcp/dhcp.log" perm(0644)); };
NK> 	filter f_dhcp { facility(local1); };
NK> 	log { source(s_sys); destination(d_logh); };
NK> 	log { source(s_sys); filter(f_dhcp); destination(dhcplog); };
NK> which puts the DHCP logs into /var/log/dhcp/dhcp.log and sends a copy to our 
NK> central log server, where a similar configuration teases them out into 
NK> separate applications for central logging.  I'm not a systems guy any more 
NK> so I'm not the one who set up the logging configuration ...
NK> Since you mention DD-WRT, I'm assuming you're running dhcpd on a re-flashed 
NK> consumer device.  If that's the case and if you have a Unix/Linux instance 
NK> running somewhere else on commodity server hardware, you may want to use 
NK> that as a central log server rather than burn through write cycles on your 
NK> consumer device's NVRAM.  Or (if you have the option) attach an external USB 
NK> hard drive to your device just for logging.

More information about the dhcp-users mailing list