<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<meta content="text/html;charset=ISO-8859-1" http-equiv="Content-Type">
</head>
<body bgcolor="#ffffff" text="#0050d0">
<font size="-1"><font face="Helvetica, Arial, sans-serif">Ya, I imagine
theyre static linked because its easier to release for more distro's
that way. I build the RPMs for our environment because there are a few
extra patches I throw in (and I want pcre). For our older boxes
(RHEL4), I build both glib and pcre in a separate dir (not installed in
the system), and then when compiling syslog-ng I static link just pcre
and glib, and leave everything else linked against the normal system
libs.<br>
<br>
Unless you have some reason to not use the binaries provided by
balabit, I'd say its would be much easier to just use those.<br>
<br>
-Patrick<br>
</font></font><br>
Sent: Fri Sep 24 2010 14:53:25 GMT-0600 (Mountain Daylight Time)<br>
From: Matthew Hall <a class="moz-txt-link-rfc2396E" href="mailto:mhall@mhcomputing.net"><mhall@mhcomputing.net></a><br>
To: Syslog-ng users' and developers' mailing list
<a class="moz-txt-link-rfc2396E" href="mailto:syslog-ng@lists.balabit.hu"><syslog-ng@lists.balabit.hu></a> <br>
Subject: Re: [syslog-ng] pdbtool patternize update and my syslog-ng 3.2
branch
<blockquote cite="mid:20100924205325.GA24672@mhcomputing.net"
type="cite">
<pre wrap="">Further investigation...
The Balabit RPMs must be built specially because the daemon looks mostly
statically linked. Is there some secret to building code for old Linuxes
like the BalaBit RPMs?
Matthew.
On Fri, Sep 24, 2010 at 10:57:38AM -0700, Matthew Hall wrote:
</pre>
<blockquote type="cite">
<pre wrap="">Hello Peter,
Thanks for the update on the status of patterndb patternize.
I wondered if the memory leaks you said existed in the old version had
been fixed, you did not say one way or the other in your mail.
I also wonder if anybody at Balabit could tell me how to build a copy of
your Git tree on RHEL 4 or RHEL 5. I get problems because the PCRE is
too old but when I switch to new PCRE, PCRE will not build because the
autotools and pkg-config are too old.
It's a problem for me because unfortunately my company only supports
RHEL here and otherwise I have to run it in an Ubuntu 10.04 or Debian VM
with way too little memory for the tool to run right.
Would it be possible to build a version of your tree for RHEL 4 or 5?
Matthew.
On Fri, Sep 24, 2010 at 11:27:48AM +0200, Peter Gyongyosi wrote:
</pre>
<blockquote type="cite">
<pre wrap="">
Hello,
As the patterndb project is starting to gain some momentum I thought
it'd be the right time to port my patternize tool to the new,
plugin-based 3.2 codebase as the first step towards getting it
integrated --- and to be able to use the fancy new pdbtool features
along with patternize. To those who are unfamiliar with it,
patternize is an addition to pdbtool that makes it possible to
automatically generate a pattern database from raw logs using
statistical data clustering methods: you can read more about it in
this blog post:
<a class="moz-txt-link-freetext" href="http://gyp.blogs.balabit.com/2010/01/introducing-pdbtool-patternize/">http://gyp.blogs.balabit.com/2010/01/introducing-pdbtool-patternize/</a>
Besides the port to the new codebase, it's received some fixes and
new features since my original post:
* multiple small internal bugfixes to get rid of weird errors
* added the option "/--named-parsers/" that names the found
@ESTRING@s like "/.dict.string0,1,2,3.../"
* Balint Kovacs has sent three contributions: added support for
reading the logfile from the standard input, escaping special
characters in the output and putting examples in the XML that can be
used for self-testing.
It can be found in my public syslog-ng 3.2 tree:
<a class="moz-txt-link-freetext" href="http://git.balabit.hu/?p=gyp/syslog-ng-3.2.git;a=summary">http://git.balabit.hu/?p=gyp/syslog-ng-3.2.git;a=summary</a>
If you're already using it (I've received some feedback so I guess
some of you do), please note that most probably this 3.2-based
branch will get the fixes and new features from now on.
It's only received a basic sanity check and the unit tests do pass,
so as usual, handle it with care and all feedback is welcome.
greets,
Peter
ps.: the branch also contains a patch that fixes a wrong section
name in pdbtool's man page and I'll try to update the whole manpage
a bit when adding a section for patternize soon -- Bazsi, you might
want to pull those to the mainline.
</pre>
</blockquote>
</blockquote>
<pre wrap=""><!---->______________________________________________________________________________
Member info: <a class="moz-txt-link-freetext" href="https://lists.balabit.hu/mailman/listinfo/syslog-ng">https://lists.balabit.hu/mailman/listinfo/syslog-ng</a>
Documentation: <a class="moz-txt-link-freetext" href="http://www.balabit.com/support/documentation/?product=syslog-ng">http://www.balabit.com/support/documentation/?product=syslog-ng</a>
FAQ: <a class="moz-txt-link-freetext" href="http://www.campin.net/syslog-ng/faq.html">http://www.campin.net/syslog-ng/faq.html</a>
</pre>
</blockquote>
</body>
</html>