<div>Nate,</div>
<div> </div>
<div>Thanks for replying. I did try that but I get the same results... UDP destinations work until I add the spoof_source to the destination.</div>
<div> </div>
<div>How does the spoof_source work? Does it call some external library that I have the wrong version of on the Solaris9 boxes? What about lex? I also ran debug on the syslog-ng runtime and it just spews a bunch of senseless info. Might it be helpful if I post that?
</div>
<div> </div>
<div>Thanks for your help!</div>
<div><br> </div>
<div><span class="gmail_quote">On 10/11/05, <b class="gmail_sendername">Nate Campi</b> <<a href="mailto:nate@campin.net">nate@campin.net</a>> wrote:</span>
<blockquote class="gmail_quote" style="PADDING-LEFT: 1ex; MARGIN: 0px 0px 0px 0.8ex; BORDER-LEFT: #ccc 1px solid">I'd just compile it on Solaris 8 and copy the binary over to the Solaris<br>9 box until a fix was found (or
</blockquote><br>
<blockquote class="gmail_quote" style="PADDING-LEFT: 1ex; MARGIN: 0px 0px 0px 0.8ex; BORDER-LEFT: #ccc 1px solid">never bother).<br><br>On Tue, Oct 11, 2005 at 03:27:38PM -0400, Chance Ellis wrote:<br>> Can someone please point me in a direction on where I could get some help
<br>> with this?<br>><br>> On 10/6/05, Chance Ellis <<a href="mailto:chance.ellis@gmail.com">chance.ellis@gmail.com</a>> wrote:<br>> ><br>> > Has anyone else had problems doing spoof_source on Solaris 9???
<br>> ><br>> ><br>> > On 10/4/05, Chance Ellis <<a href="mailto:chance.ellis@gmail.com">chance.ellis@gmail.com</a>> wrote:<br>> > ><br>> > > Here is just a snippet from the configure output:
<br>> > ><br>> > > checking pthread.h presence... yes<br>> > > checking for pthread.h... yes<br>> > > checking for pthread_create in -lpthread... yes<br>> > > checking whether to enable Sun STREAMS support... yes
<br>> > > checking whether to enable Sun door support... yes<br>> > > checking whether to enable TCP wrapper support... no<br>> > > checking whether to enable spoof_source support... yes<br>> > > checking how to enable static linking for certain libraries... no clues,
<br>> > > linking<br>> > > everything dynamically, please send appropriate ld arguments to<br>> > > syslog-ng@lists<br>> > > .balabit.hu<br>> > > checking libol version >= 0.3.16..
. ok<br>> > > configure: creating ./config.status<br>> > > config.status: creating Makefile<br>> > > config.status: creating src/Makefile<br>> > > config.status: creating src/tests/Makefile
<br>> > > config.status : creating doc/Makefile<br>> > > config.status : creating doc/sgml/Makefile<br>> > > config.status: creating contrib/Makefile<br>> > > config.status: creating syslog-ng.spec
<br>> > > config.status: creating src/config.h<br>> > > config.status: src/config.h is unchanged<br>> > > config.status: executing depfiles commands<br>> > > Am I still missing something? This work on my Solaris 8 server, but
<br>> > > not on my Solaris 9 box.<br>> > > Thanks!<br>> > > On 10/4/05, Gerardo Amaya <<a href="mailto:joseg@galileo.edu">joseg@galileo.edu</a> > wrote:<br>> > > ><br>> > > > Chance Ellis wrote:
<br>> > > ><br>> > > > > I am running syslog-ng 1.6.8 on Solaris 9. I recompiled with the<br>> > > > > --enable-spoof-source configure option.<br>> > > > ><br>> > > > > Here is my config:
<br>> > > > ><br>> > > > > destination d_squelch_acl { udp("<a href="http://10.159.234.52">10.159.234.52</a><<a href="http://10.159.234.52/">http://10.159.234.52/</a>><<a href="http://10.159.234.52">
http://10.159.234.52</a><br>> > > > >"<br>> > > > > port(514) spoof_source(yes)); };<br>> > > > > filter f_squelch_acl { match("list squelch denied"); };<br>> > > > > log { source(net); filter(f_squelch_acl);
<br>> > > > destination(d_squelch_acl);};<br>> > > > > source net { udp(); };<br>> > > > ><br>> > > > ><br>> > > > > If I start syslog-ng without spoof_source(yes) option, all messages
<br>> > > > > matching are forwarded to the machine in the destination. If I<br>> > > > change<br>> > > > > to spoof_source(yes) nothing gets forwarded at all. I do not get any<br>
> > > ><br>> > > > > errors when I start syslog-ng, like "spoof-source support not<br>> > > > compiled<br>> > > > > in" which I get on other boxes I have not recompiled on yet.
<br>> > > > ><br>> > > > > Any ideas?<br>> > > > ><br>> > > > > Chance<br>> > > > ><br>> > > > ><br>> > > > ><br>> > > > >------------------------------------------------------------------------
<br>> > > ><br>> > > > ><br>> > > > >_______________________________________________<br>> > > > >syslog-ng maillist - <a href="mailto:syslog-ng@lists.balabit.hu">syslog-ng@lists.balabit.hu
</a><br>> > > > > <a href="https://lists.balabit.hu/mailman/listinfo/syslog-ng">https://lists.balabit.hu/mailman/listinfo/syslog-ng</a><br>> > > > >Frequently asked questions at<br>> > > >
<a href="http://www.campin.net/syslog-ng/faq.html">http://www.campin.net/syslog-ng/faq.html</a><br>> > > > ><br>> > > > ><br>> > > > ><br>> > > > when you run the configure did you get in the result?
<br>> > > ><br>> > > > checking whether to enable spoof_source support....... yes<br>> > > ><br>> > > > Sometimes it did not find the library where is suppose to be. your<br>
> > > > config looks ok. can you confirm on this?<br>> > > ><br>> > > > best regards<br>> > > ><br>> > > > Gerardo Amaya<br>> > > ><br>> > >
<br>> > ><br>> ><br><br>> _______________________________________________<br>> syslog-ng maillist - <a href="mailto:syslog-ng@lists.balabit.hu">syslog-ng@lists.balabit.hu</a><br>> <a href="https://lists.balabit.hu/mailman/listinfo/syslog-ng">
https://lists.balabit.hu/mailman/listinfo/syslog-ng</a><br>> Frequently asked questions at <a href="http://www.campin.net/syslog-ng/faq.html">http://www.campin.net/syslog-ng/faq.html</a><br>><br><br><br>--<br>Nate<br>
<br>"The mind is everything. What you think you become." - Buddha<br><br>_______________________________________________<br>syslog-ng maillist - <a href="mailto:syslog-ng@lists.balabit.hu">syslog-ng@lists.balabit.hu
</a><br><a href="https://lists.balabit.hu/mailman/listinfo/syslog-ng">https://lists.balabit.hu/mailman/listinfo/syslog-ng</a><br>Frequently asked questions at <a href="http://www.campin.net/syslog-ng/faq.html">http://www.campin.net/syslog-ng/faq.html
</a><br><br></blockquote></div><br>