<table cellspacing="0" cellpadding="0" border="0" ><tr><td valign="top" style="font: inherit;"><DIV>Many Thanks to all those who replied.</DIV>
<DIV> </DIV>
<DIV> </DIV>
<DIV>Martin:</DIV>
<DIV> </DIV>
<DIV>It is version 2.0.3</DIV>
<DIV> </DIV>
<DIV>Thank you for the hint. Now have fixed the issue in my program and is working fine as expected. It doesn't send the new line chars any more. I am copy-pasting the config and program. Please let me know, if it can still be improved.</DIV>
<DIV> </DIV>
<DIV> </DIV>
<DIV>syslog-ng.conf:</DIV>
<DIV>destination convert_syslog_to_trap { <BR> program ("/tmp/convertSyslogToTrap"); <BR>};</DIV>
<DIV> </DIV>
<DIV>cat /tmp/convertSyslogToTrap:</DIV>
<DIV>#!/bin/bash<BR> read syslog<BR> # Process the syslog message and forward it as trap using /usr/local/bin/snmptrap</DIV>
<DIV> </DIV>
<DIV> </DIV>
<DIV>Mathew: </DIV>
<DIV> </DIV>
<DIV>I do use Net-SNMP to an extent with embedded perl. But mostly I use it for receiving SNMP traps. Do you mean that, it provides a facility to receive syslogs as well ? If so, would be interested to use that feature. Are they any comparision chars available between Net-SNMP syslog receiving capability and syslog-ng capability ?</DIV>
<DIV> </DIV>
<DIV>Balazs & Clayton </DIV>
<DIV> </DIV>
<DIV>This request is not specific to Cisco devices and requirement is to handle syslogs. Also, it is not possible to suggest to my customer to configure devices to send traps for syslogs. </DIV>
<DIV> </DIV>
<DIV> </DIV>
<DIV><BR><BR>--- On <B>Thu, 12/9/10, Martin Holste <I><mcholste@gmail.com></I></B> wrote:<BR></DIV>
<BLOCKQUOTE style="BORDER-LEFT: rgb(16,16,255) 2px solid; PADDING-LEFT: 5px; MARGIN-LEFT: 5px"><BR>From: Martin Holste <mcholste@gmail.com><BR>Subject: Re: [syslog-ng] Convert syslog to traps<BR>To: difficult_id@yahoo.com, "Syslog-ng users' and developers' mailing list" <syslog-ng@lists.balabit.hu><BR>Date: Thursday, December 9, 2010, 2:05 PM<BR><BR>
<DIV id=yiv2128166731>I think program() is the best bet for you. I haven't had anything like that happen when using program(). What version of syslog-ng are you using? I don't think syslog-ng is sending newlines, but your script may be interpreting "silence" from syslog-ng as nothing and appending a newline or something. If you post a snippet from your script showing how it's reading from syslog-ng, that would help. It would also help to see the config relevant to the program() destination.<BR><BR>
<DIV class=yiv2128166731gmail_quote>On Thu, Dec 9, 2010 at 12:27 PM, Jay <SPAN dir=ltr><<A href="http://us.mc393.mail.yahoo.com/mc/compose?to=difficult_id@yahoo.com" rel=nofollow target=_blank ymailto="mailto:difficult_id@yahoo.com">difficult_id@yahoo.com</A>></SPAN> wrote:<BR>
<BLOCKQUOTE style="BORDER-LEFT: rgb(204,204,204) 1px solid; MARGIN: 0pt 0pt 0pt 0.8ex; PADDING-LEFT: 1ex" class=yiv2128166731gmail_quote>
<TABLE border=0 cellSpacing=0 cellPadding=0>
<TBODY>
<TR>
<TD vAlign=top>
<DIV>Have a requirement to convert all incoming syslogs to SNMP traps and send it to another host. One option I could think of is to use program () destination.</DIV>
<DIV> </DIV>
<DIV>When I tried this option, I find that syslog-ng is <SPAN style="FONT-SIZE: 10pt">continuously sending newline characters to the specified program. i.e. even when no syslog is received, syslog-ng seems to be pumping newline chars to the specified program.</SPAN></DIV>
<DIV><SPAN style="FONT-SIZE: 10pt"></SPAN> </DIV>
<DIV><SPAN style="FONT-SIZE: 10pt">Also I read the warning message in admin guide that, it will open up the door to DOS attack.</SPAN></DIV>
<DIV><SPAN style="FONT-SIZE: 10pt"></SPAN> </DIV>
<DIV><SPAN style="FONT-SIZE: 10pt">Could someone let me know the best way to achieve this, please ?</SPAN></DIV>
<DIV><SPAN style="FONT-SIZE: 10pt"></SPAN> </DIV>
<DIV><SPAN style="FONT-SIZE: 10pt">Thanks in advance for the help.</SPAN></DIV>
<DIV><SPAN style="FONT-SIZE: 10pt">John</SPAN></DIV></TD></TR></TBODY></TABLE><BR><BR>______________________________________________________________________________<BR>Member info: <A href="https://lists.balabit.hu/mailman/listinfo/syslog-ng" rel=nofollow target=_blank>https://lists.balabit.hu/mailman/listinfo/syslog-ng</A><BR>Documentation: <A href="http://www.balabit.com/support/documentation/?product=syslog-ng" rel=nofollow target=_blank>http://www.balabit.com/support/documentation/?product=syslog-ng</A><BR>FAQ: <A href="http://www.campin.net/syslog-ng/faq.html" rel=nofollow target=_blank>http://www.campin.net/syslog-ng/faq.html</A><BR><BR><BR></BLOCKQUOTE></DIV><BR></DIV></BLOCKQUOTE></td></tr></table><br>