<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<meta content="text/html;charset=ISO-8859-2" http-equiv="Content-Type">
<title></title>
</head>
<body bgcolor="#ffffff" text="#000000">
Jan Rekorajski írta:
<blockquote cite="mid:20090423224801.GB8654@sith.mimuw.edu.pl"
type="cite">
<pre wrap="">On Thu, 23 Apr 2009, Pallagi Zoltan wrote:
</pre>
<blockquote type="cite">
<pre wrap="">Hi,
I also have tried to reproduce this issue but without success:
</pre>
</blockquote>
<pre wrap=""><!---->[cut successful run]
</pre>
<blockquote type="cite">
<pre wrap="">I tested it with sshguard-1.4rc3.
Could you tell me the version of your sshguard?
</pre>
</blockquote>
<pre wrap=""><!---->
I run 1.4rc2, just tried 1.4rc3, still fails :(
</pre>
<blockquote type="cite">
<pre wrap="">It will be very useful to run syslog-ng with strace:
strace -s 256 /opt/syslog-ng/sbin/syslog-ng -F
</pre>
</blockquote>
<pre wrap=""><!---->
I attached gziped strace output and my config.
</pre>
</blockquote>
Thank you.<br>
from the strace output:<br>
<br>
rt_sigreturn(0xf) = -1 ESPIPE (Illegal seek)<br>
write(12, "Apr 24 00:37:42 sith sshguard[14041]: Got exit signal,
flushing blocked addresses and exiting...\n"..., 97) = 97<br>
lseek(12, 0, SEEK_END) = -1 ESPIPE (Illegal seek)<br>
--- SIGTERM (Terminated) @ 0 (0) ---<br>
--- SIGCHLD (Child exited) @ 0 (0) ---<br>
rt_sigreturn(0x11) = 0<br>
rt_sigreturn(0xf) = -1 ESPIPE (Illegal seek)<br>
<br>
You have got a simple SIGTERM signal but I don't know which process
sends it.<br>
I wasn't able to reproduce it with your config and sshguard.<br>
Please tell me about the version of your syslog-ng because my syslog-ng
(version 3.0.1) was not able to start with your config first time
(facility(syslog) is a reserved word). Just tell me the result of
syslog-ng -V command.<br>
<br>
However, I've no idea what the wrong is. You might try to replace the
sshguard destination to other program destination (e. g. simple bash
script). If the bug is not exist anymore then the reason for mysterious
error was the sshguard<br>
<br>
<br>
<blockquote cite="mid:20090423224801.GB8654@sith.mimuw.edu.pl"
type="cite">
<pre wrap="">
Thanks,
Jan
</pre>
<pre wrap=""><pre wrap="">
<hr size="4" width="90%">
______________________________________________________________________________
Member info: <a class="moz-txt-link-freetext" href="https://lists.balabit.hu/mailman/listinfo/syslog-ng">https://lists.balabit.hu/mailman/listinfo/syslog-ng</a>
Documentation: <a class="moz-txt-link-freetext" href="http://www.balabit.com/support/documentation/?product=syslog-ng">http://www.balabit.com/support/documentation/?product=syslog-ng</a>
FAQ: <a class="moz-txt-link-freetext" href="http://www.campin.net/syslog-ng/faq.html">http://www.campin.net/syslog-ng/faq.html</a>
</pre></pre>
</blockquote>
<br>
</body>
</html>