Page 1 of 1

mandi/journalctl questions

PostPosted: Jul 6th, '15, 04:56
by arromdee
How do I get journalctl to show all entries except those created by a particular program, such as mandi? (aside from journalctrl | grep -v mandi)

Also, what exactly is mandi? The description in Software Management makes it sound like a firewall, but then I don't understand the difference between it and shorewall. (Do I even need both?)

Re: mandi/journalctl questions

PostPosted: Jul 6th, '15, 09:59
by doktor5000
Pretty easy to answer:

┌─[doktor5000@Mageia5]─[09:49:46]─[~]
└──╼ rpm -qi mandi | grep -A10 Description
Description :
Mandi is a monitoring daemon which acts as a bridge from root
monitoring libraries to user applications, using D-Bus.
Its plugin system allows to monitor different kind of events.
A built-in plugin forwards wireless scan results from wpa_supplicant
to user applications.


┌─[doktor5000@Mageia5]─[09:49:49]─[~]
└──╼ rpm -qi mandi-ifw | grep -A10 Description
Description :
This package contains the iptables rules used to forward intrusion
detections to the mandi daemon.
It is a component of Interactive Firewall.


mandi-ifw contains the applet which informs you about portscans and such.

And for your first query, seems not, but you can take a look at a workaround: http://stackoverflow.com/questions/2396 ... re-process

Re: mandi/journalctl questions

PostPosted: Jul 6th, '15, 10:14
by arromdee
┌─[doktor5000@Mageia5]─[09:49:46]─[~]
└──╼ rpm -qi mandi | grep -A10 Description
Description :
Mandi is a monitoring daemon which acts as a bridge from root
monitoring libraries to user applications, using D-Bus.
Its plugin system allows to monitor different kind of events.
A built-in plugin forwards wireless scan results from wpa_supplicant
to user applications.




Yes, and I thought that was a firewall was for, at least when "events" means "things on the Internet".

Re: mandi/journalctl questions

PostPosted: Jul 7th, '15, 08:57
by doktor5000
Your point being?