October 1999 - syslog-ng - lists.balabit.hu

release plans
by Balazs Scheidler 27 Oct '99

27 Oct '99

Hi, I'm planning to release version 1.2.0 of syslog-ng, and start a fork a new development cycle. I was waiting so long to fix Solaris support, but decided to release 1.2.0 anyhow, Solaris support will be fixed later. The recently added macro support will be released as 1.3.0, and development will continue on that branch. So 1.2.0 as I release it now should work without problems on *BSD and Linux, and using a workaround on Solaris. -- Bazsi PGP info: KeyID 9AF8D0A9 Fingerprint CD27 CFB0 802C 0944 9CFD 804E C82C 8EB1 url: http://www.balabit.hu/pgpkey.txt

1 0

Re: Welcome To "syslog-ng"!
by Gael Martinez 27 Oct '99

27 Oct '99

Hi I have some trouble with syslog-ng and Solaris 7 x86 Generic_106542-07 I put that in the .conf file source src { sun-streams("/dev/log" door("/etc/.syslog_door")); }; and when I launch the daemon I get that do_init_afstreams_source: Cannot open sun-stream /dev/log (Operation not supported on transport endpoint) Error initializing configuration, exiting. Terminated Any Clue ? Regards Gael -- Gael MARTINEZ Spacestar Communications, Inc. Dial-up to DS-3 Serving - MN WI ND MI IL www.spacestar.net / Fax (612) 996-0123

2 1

destination filename macro expansion
by Balazs Scheidler 26 Oct '99

26 Oct '99

Hi, I've worked a bit on syslog-ng and implemented macro expansion on destination filenames. It's not complete yet, but anyone interested may play with it a bit. Here's an example how to use this: ----------------------------------------------------- options { long_hostnames(on); time_reopen(2); }; source src { unix-stream("log1"); internal(); }; destination all { file("/var/log/$HOST.log"); }; log { source(src); destination(all); }; ------------------------------------------------------ You'll need to grab the source from the CVS to use this. -- Bazsi PGP info: KeyID 9AF8D0A9 Fingerprint CD27 CFB0 802C 0944 9CFD 804E C82C 8EB1 url: http://www.balabit.hu/pgpkey.txt

1 0

Re: Problems configuring syslog-ng
by Balazs Scheidler 22 Oct '99

22 Oct '99

On Fri, Oct 22, 1999 at 11:35:42PM +1000, John Doe wrote: > Hi, > I just downloaded syslog-ng 1.1.33 and I'm trying to run it on FreeBSD > 3.3. syslog-ng compiles and installs without any problems at all, but nice to hear. > when it comes to running it I get no log entries. The following is my > syslog-ng.conf file which I am using, and I'd guess that I've made some > terrible problem there, if you could please point me to where I am going > wrong it would be much appreciated. > > #----cut----- > options { sync(0); time_reopen(10); log_fifo_size(100) }; > > source src { > unix-stream("/var/run/log"); > internal(); > }; > > destination everything { > file("/var/log/newsyslog" compress(on) sync(0) log_fifo_size(10)); > }; > > log { source(src); destination(everything); }; > #----cut------ The problem is that BSD systems use unix-dgram sockets to send local log messages. So your source statement should look like: source src { unix-dgram("/var/run/log"); internal(); }; This is described in the INSTALL file: BSDi: ----- BSD is similar to Linux (or vice-versa Linux is similar to BSD, but this is another issue), so BSD has also a unix socket for log communication, but it's of type SOCK_DGRAM, and it is located at /var/run/log. So the source statement you are looking for is: source stdlog { unix-dgram("/var/run/log"); }; Or in the .sgml generated documentation doc/sgml/syslog-ng.txt: > I intend to run syslog-ng over (remote logging) my LAN (Linux, OpenBSD > and FreeBSD machines) when I get it going with what-ever > encryption/hashing syslog-ng supports. Sorry for the poor question, > however there doesn't appear to be much documention included with > syslog-ng. Suggestion: how about you include 5 sample setup files which > syslog-ng users have put into effect on their systems in a doc/samples > directory. If you cannot help me with my log-configuration file above, > perhaps you could send me your syslog-ng config file (well actaully I'd > be interested in seeing how you've implemented syslog-ng anway). You can find a demo configuration file which includes all possible parameters syslog-ng parses (doc/syslog-ng.conf.demo), even those syslog-ng doesn't implement yet (compress, encrypt etc. come to mind), and another one meant as a default configuration file: doc/syslog-ng.conf.sample -- Bazsi PGP info: KeyID 9AF8D0A9 Fingerprint CD27 CFB0 802C 0944 9CFD 804E C82C 8EB1 url: http://www.balabit.hu/pgpkey.txt

1 0

Redhat init script?
by David Robinson 22 Oct '99

22 Oct '99

Has anyone made up a standard syslog-ng start/stop init script for Redhat 6? I noticed there was a debian one.. I'm currently just starting syslog-ng from the rc.local script. If not I'll create one but I don't want to do it if someone has already done it. Regards, David Robinson.

3 5

building syslog-ng on irix-6.5, door functions
by Bevan Broun 21 Oct '99

21 Oct '99

Hi Im trying to build syslog-ng on an SGI Indy running irix-6.5 but the build fails with: ld32: ERROR 33: Unresolved text symbol "door_revoke" -- 1st referenced by afstreams.o. Use linker option -v to see when and which objects, archives and dsos are loaded. I dont think irix has any of the door functions. TIA BB -- Bevan Broun ph (08) 9380 1587 Computer Systems Officer fax (08) 9380 1065 Dept. Electrical and Electronic Engineering University of Western Australia rm. G70

1 0

syslog-ng 1.1.33
by Balazs Scheidler 20 Oct '99

20 Oct '99

Hi, I've released a new version of syslog-ng. Nothing really new, just incorporated a few BSD build fixes, and reorganized the build system a bit. I'm taking part in the syslog-sec discussions initiated by the IETF. I'll try to keep syslog-ng up to date with respect with the new syslog specification. I've also updated the web page a bit: http://www.balabit.hu/products/syslog-ng -- Bazsi PGP info: KeyID 9AF8D0A9 Fingerprint CD27 CFB0 802C 0944 9CFD 804E C82C 8EB1 url: http://www.balabit.hu/pgpkey.txt

1 0

你有产品要在网上宣传吗？找我啊
by hello 16 Oct '99

16 Oct '99

你如果需要做广告，请你将你所要宣传的产品和对象告诉我，我会为你定制你所要的邮址，价格：30万邮址100元，送软件一套，一日内交货，我的邮箱用户名是usa123888或usa123168或usa123268或usa123368 邮箱是属于HOTMAIL.COM的请留你的邮箱地址以便联系，如果你不需要我看到我的广告，请发邮件到用户名usa123468 的hotmai。com中要求撤除你的邮箱地址。

1 0

Re: question on syslog-ng 1.1.32
by Balazs Scheidler 15 Oct '99

15 Oct '99

> Is it possible to make logs like the following: > > Oct 14 08:54:37 last/localhost message repeated 1 time > > unconditionally go through the filter of the message it is > referring to? With my current filtering, it is difficult to tell what > message this actually applies to because it gets written to a different > file than the message itself. Thanks for any help. syslog-ng currently doesn't generate such repetition messages, so it must be something that sends messages to syslog-ng, thus there's no way finding out which message it is referring to. In syslog-ng this will be implemented in the destination drivers, so these messages will go where the one they are referring to. -- Bazsi

1 0

Re: NG Syslog
by Balazs Scheidler 15 Oct '99

15 Oct '99

On Thu, Oct 14, 1999 at 04:05:10PM +0200, Kai U. Reichert wrote: > Hi! > > As I was browsing through your web-site some things were strange ? > Up to the time of Aug 29 you´ve released permanently a new version, but > the latest one is more than one month old; and the CVS-server is down ? > > Have you droped your project or will there be improvements ? > > I´m just asking, because I have need for an sophisticated syslog daemon. The project is not dropped, it's only on hold for some time while I have other things to do. 1.1.32 seemed to be quite stable at least on Linux and BSD. It's not named 1.2.0 yet, because Solaris is not fully supported, because I was unable to borrow an x86 Solaris CD. There are quite a few improvements planned in the next development cycle, for more information check the lists archives. The topic of my master's thesis is the cryptographic enhancements of syslog-ng, so it will definitely be finished until the end of the next semester. -- Bazsi

1 0