<html>
<head>
<meta http-equiv="content-type" content="text/html; charset=UTF-8">
</head>
<body>
<div><span style="line-height: 1.5">Thats fine if its a copy paste mistake and compression is enabled by default. Yes both sides are on tls. No I dont want to disable, rather wanted to make sure network transfers do get compressed. Except tcpdump , any other method to confirm ?</span><br /></div><div>Thanks for the response. </div><div><br /></div><div>Jagshah.</div><div><br /></div><div>14. Aug 2016 22:54 by <a href="mailto:balazs.scheidler@balabit.com" target="_blank">balazs.scheidler@balabit.com</a>:<br /><br /><blockquote class="tutanota_quote" style="border-left: 1px solid #93A3B8; padding-left: 10px; margin-left: 5px;"><p>Hmm, I dont know that option, maybe the premium edition team added that and it trickled into the open source documentation. Iirc by default syslog-ng made sure compression happens within tls as long as the other party supports it.</p>
<p>Or you want to disable it?</p>
<div class="gmail_quote">On Aug 12, 2016 20:15, <<a href="mailto:thejaguar@tutanota.de" target="_blank">thejaguar@tutanota.de</a>> wrote:<br /><blockquote class="gmail_quote" style="margin: 0 0 0 0.8ex ; border-left: 1px #ccc solid ; padding-left: 1ex">
<div>
<p>Hi all,</p>
<p>According to this <a href="https://www.balabit.com/documents/syslog-ng-ose-latest-guides/en/syslog-ng-ose-guide-admin/html/tlsoptions.html" target="_blank">https://www.balabit.com/documents/syslog-ng-ose-latest-guides/en/syslog-ng-ose-guide-admin/html/tlsoptions.html</a></p>
<p>Allow-compression() should be a working option under tls.</p>
<p>I did google on this a lot and found no config snippet
which shows allow-compress() to be working and to my surprise when I tried to
include it in my config I get syntax error ___________________________________________________</p>
<p> </p>
<p>2016-08-11T15:27:19.538347] Registering candidate plugin;
module='afsocket', context='source', name='systemd-syslog', preference='100'</p>
<p>[2016-08-11T15:27:19.539190] Using /dev/log Unix socket
with systemd is not possible. Changing to systemd-syslog source, which supports
socket activation.; Error parsing afsocket, syntax error, unexpected
LL_IDENTIFIER, expecting ')' in /etc/syslog-ng/syslog-ng.conf at line 27,
column 124:</p>
<p> </p>
<p>destination d_net_tls { network(
"<a href="http://syslog1.xxxxxxxxx.com" target="_blank">syslog1.xxxxxxxxx.com</a>" port(6514) transport("tls") tls(
ca-dir("/etc/syslog-ng/ca") allow-compress(yes)
peer-verify(required-trusted) ssl-options(no-sslv3,no-tlsv1) )</p>
<p>
^^^^^^^^^^^^^^ ___________________________________________________</p>
<p>I am using 3.8.0 on
ubuntu 15.10. </p>
<p>Is this even really supported as claimed in here <a href="https://www.balabit.com/network-security/syslog-ng/comparing/detailed" target="_blank">https://www.balabit.com/network-security/syslog-ng/comparing/detailed</a></p>
<p> </p>
<p># /usr/sbin/syslog-ng -V</p>
<p>syslog-ng 3.8.0beta2</p>
<p>Installer-Version: 3.8.0beta2</p>
<p>Revision: 3.8.0beta2-1</p>
<p>Module-Directory: /usr/lib/syslog-ng/3.8</p>
<p>Module-Path: /usr/lib/syslog-ng/3.8</p>
<p>Available-Modules:
affile,basicfuncs,system-source,cryptofuncs,pseudofile,afuser,csvparser,linux-kmsg-format,confgen,sdjournal,syslogformat,afprog,dbparser,afsocket</p>
<p>Enable-Debug: off</p>
<p>Enable-GProf: off</p>
<p>Enable-Memtrace: off</p>
<p>Enable-IPv6: on</p>
<p>Enable-Spoof-Source: on</p>
<p>Enable-TCP-Wrapper: on</p>
<p>Enable-Linux-Caps: off</p>
<p> </p><p><br /></p><p><br /></p> </div>
<br />______________________________________________________________________________<br />
Member info: <a href="https://lists.balabit.hu/mailman/listinfo/syslog-ng" target="_blank">https://lists.balabit.hu/mailman/listinfo/syslog-ng</a><br />
Documentation: <a href="http://www.balabit.com/support/documentation/?product=syslog-ng" target="_blank">http://www.balabit.com/support/documentation/?product=syslog-ng</a><br />
FAQ: <a href="http://www.balabit.com/wiki/syslog-ng-faq" target="_blank">http://www.balabit.com/wiki/syslog-ng-faq</a><br />
<br />
<br /></blockquote></div></blockquote></div> </body>
</html>