I think program() is the best bet for you. I haven't had anything like that happen when using program(). What version of syslog-ng are you using? I don't think syslog-ng is sending newlines, but your script may be interpreting "silence" from syslog-ng as nothing and appending a newline or something. If you post a snippet from your script showing how it's reading from syslog-ng, that would help. It would also help to see the config relevant to the program() destination.<br>
<br><div class="gmail_quote">On Thu, Dec 9, 2010 at 12:27 PM, Jay <span dir="ltr"><<a href="mailto:difficult_id@yahoo.com">difficult_id@yahoo.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin: 0pt 0pt 0pt 0.8ex; border-left: 1px solid rgb(204, 204, 204); padding-left: 1ex;">
<table border="0" cellpadding="0" cellspacing="0"><tbody><tr><td style="font: inherit;" valign="top"><div>Have a requirement to convert all incoming syslogs to SNMP traps and send it to another host. One option I could think of is to use program () destination.</div>
<div> </div>
<div>When I tried this option, I find that syslog-ng is <span style="font-size: 10pt;">continuously sending newline characters to the specified program. i.e. even when no syslog is received, syslog-ng seems to be pumping newline chars to the specified program.</span></div>
<div><span style="font-size: 10pt;"></span> </div>
<div><span style="font-size: 10pt;">Also I read the warning message in admin guide that, it will open up the door to DOS attack.</span></div>
<div><span style="font-size: 10pt;"></span> </div>
<div><span style="font-size: 10pt;">Could someone let me know the best way to achieve this, please ?</span></div>
<div><span style="font-size: 10pt;"></span> </div>
<div><span style="font-size: 10pt;">Thanks in advance for the help.</span></div>
<div><span style="font-size: 10pt;">John</span></div></td></tr></tbody></table><br>
<br>______________________________________________________________________________<br>
Member info: <a href="https://lists.balabit.hu/mailman/listinfo/syslog-ng" target="_blank">https://lists.balabit.hu/mailman/listinfo/syslog-ng</a><br>
Documentation: <a href="http://www.balabit.com/support/documentation/?product=syslog-ng" target="_blank">http://www.balabit.com/support/documentation/?product=syslog-ng</a><br>
FAQ: <a href="http://www.campin.net/syslog-ng/faq.html" target="_blank">http://www.campin.net/syslog-ng/faq.html</a><br>
<br>
<br></blockquote></div><br>