mandi/journalctl questions

[arromdee]

How do I get journalctl to show all entries except those created by a particular program, such as mandi? (aside from journalctrl | grep -v mandi)

Also, what exactly is mandi? The description in Software Management makes it sound like a firewall, but then I don't understand the difference between it and shorewall. (Do I even need both?)

[doktor5000]

Pretty easy to answer:

┌─[doktor5000@Mageia5]─[09:49:46]─[~]
└──╼ rpm -qi mandi | grep -A10 Description
Description :
Mandi is a monitoring daemon which acts as a bridge from root
monitoring libraries to user applications, using D-Bus.
Its plugin system allows to monitor different kind of events.
A built-in plugin forwards wireless scan results from wpa_supplicant
to user applications.

┌─[doktor5000@Mageia5]─[09:49:49]─[~]
└──╼ rpm -qi mandi-ifw | grep -A10 Description
Description :
This package contains the iptables rules used to forward intrusion
detections to the mandi daemon.
It is a component of Interactive Firewall.

mandi-ifw contains the applet which informs you about portscans and such.

And for your first query, seems not, but you can take a look at a workaround: http://stackoverflow.com/questions/2396 ... re-process

[arromdee]

┌─[doktor5000@Mageia5]─[09:49:46]─[~]
└──╼ rpm -qi mandi | grep -A10 Description
Description :
Mandi is a monitoring daemon which acts as a bridge from root
monitoring libraries to user applications, using D-Bus.
Its plugin system allows to monitor different kind of events.
A built-in plugin forwards wireless scan results from wpa_supplicant
to user applications.

Yes, and I thought that was a firewall was for, at least when "events" means "things on the Internet".

[doktor5000]

Your point being?