January 2003 - syslog-ng - lists.balabit.hu

30��ַ100Ԫ��һ��
by tiffany＠ges.com.tw 26 Jan '03

26 Jan '03

��Ҫ��棬��㽫��Ҫ��Ĳ�Ʒ�Ͷ��ң��һ�Ϊ�㶨��Ҫ��ַ��۸�30��ַ100Ԫ��һ�ף�һ��ڽ��ҵ��usa123568(a)yaoweb.com >��ַ�Ա��ϵ��㲻��Ҫ��ҵĹ�棬�뷢�ʼ��û��usa123468 @ yaoweb.com��Ҫ�󳷳��ַ�� д�� >do you have products to sell in net ,please contact with me .i can find >300000 emailaddress for you only 10$ ,and i will sent it with a emailsendersoft to you,if you need please sent a mail to me ,my email: usa123568(a)yaoweb.com >if you want to remove your emailaddress pleses sent email to username:usa123468 its yaoweb.com and full in your emaiaddress on subject.then i will delete it

1 0

remove libol & syslog-ng after install
by Douglas, Stuart 24 Jan '03

24 Jan '03

Hello, I finally got a copy of the tarballs that would install (I did have to install flex to get syslog-ng to go). Of course I realized after doing ./configure, make, make install for both that I forgot to follow the rpm path instead by doing rpm -tb on both tarballs. I'd prefer to have the installation from the rpm packages, so how do I go about uninstalling my current setup? Should I even worry about it and just use what I've done? Thanks, Stuart

2 1

Program destination doesn't accept template. Bug?
by henriksa＠telia.com 24 Jan '03

24 Jan '03

Defining a template for a program destination causes a "Parse error reading configuration file". What's that all about? I'd like to send a short version of the log message to my mailscript that will fit nicely in the topic field. It would be a lot easier to be able to do this with syslog-ng that trying to regexp it in the script. I'm using version 1.5.23 of syslog-ng. /Henrik

1 0

RE: [syslog-ng]libol & syslog-ng tarballs error out
by Michael Breton 23 Jan '03

23 Jan '03

Try unpacking them this way: gunzip -c /path/to/libol-0.2.23.tar.gz | tar xvf - gunzip -c /path/to/syslog-ng-1.4.17.tar.gz | tar xvf - -----Original Message----- From: Douglas, Stuart [mailto:stuart.douglas@agt.com] Sent: Thursday, January 23, 2003 3:15 PM To: Syslog-Ng@Lists. Balabit. Hu (E-mail) Subject: [syslog-ng]libol & syslog-ng tarballs error out Hello, I'm running RH 7.3 and am not able to install from the tarballs. I've downloaded and attempted this several times, and the results are always the same. When I do a 'tar zxvf' on either file, they give the following: libol-0.2.23/ libol-0.2.23/src/ libol-0.2.23/src/gc.c libol-0.2.23/src/gc.h libol-0.2.23/src/io.c libol-0.2.23/src/io.h libol-0.2.23/src/list.h.x libol-0.2.23/src/xalloc.c libol-0.2.23/src/xalloc.h libol-0.2.23/src/jpoll.c libol-0.2.23/src/jpoll.h libol-0.2.23/src/read_line.c libol-0.2.23/src/read_line.h libol-0.2.23/src/resource.c libol-0.2.23/src/resource.h libol-0.2.23/src/werror.c tar: Skipping to next header tar: Archive contains obsolescent base-64 headers gzip: stdin: invalid compressed data--crc error gzip: stdin: invalid compressed data--length error tar: Child returned status 1 tar: Error exit delayed from previous errors ...and... syslog-ng-1.4.17/ syslog-ng-1.4.17/doc/ syslog-ng-1.4.17/doc/sgml/ syslog-ng-1.4.17/doc/sgml/syslog-ng.html.tar.gz syslog-ng-1.4.17/doc/sgml/syslog-ng.ps syslog-ng-1.4.17/doc/sgml/Makefile.am syslog-ng-1.4.17/doc/sgml/Makefile.in syslog-ng-1.4.17/doc/sgml/syslog-ng.dvi syslog-ng-1.4.17/doc/sgml/syslog-ng.txt syslog-ng-1.4.17/doc/sgml/syslog-ng.sgml syslog-ng-1.4.17/doc/syslog-ng.conf.sample syslog-ng-1.4.17/doc/syslog-ng.8 syslog-ng-1.4.17/doc/syslog-ng.conf.5 syslog-ng-1.4.17/doc/syslog-ng.old.txt syslog-ng-1.4.17/doc/syslog-ng.conf.solaris syslog-ng-1.4.17/doc/syslog-ng.conf.demo syslog-ng-1.4.17/doc/Makefile.am syslog-ng-1.4.17/doc/Makefile.in syslog-ng-1.4.17/doc/stresstest.sh syslog-ng-1.4.17/src/ syslog-ng-1.4.17/src/center.c syslog-ng-1.4.17/src/center.h syslog-ng-1.4.17/src/afunix.c syslog-ng-1.4.17/src/cfg-lex.c syslog-ng-1.4.17/src/cfg-lex.l syslog-ng-1.4.17/src/afuser.c syslog-ng-1.4.17/src/afuser.h syslog-ng-1.4.17/src/afprogram.c.x syslog-ng-1.4.17/src/afstreams.c.x syslog-ng-1.4.17/src/afinter.c syslog-ng-1.4.17/src/afinter.h syslog-ng-1.4.17/src/afsocket.c syslog-ng-1.4.17/src/afsocket.h syslog-ng-1.4.17/src/log.c syslog-ng-1.4.17/src/log.h syslog-ng-1.4.17/src/tests/ syslog-ng-1.4.17/src/tests/testall syslog-ng-1.4.17/src/tests/syslog-ng.conf.eval syslog-ng-1.4.17/src/tests/Makefile.am syslog-ng-1.4.17/src/tests/Makefile.in syslog-ng-1.4.17/src/tests/test.eval syslog-ng-1.4.17/src/syslog-ng.h syslog-ng-1.4.17/src/filters.c syslog-ng-1.4.17/src/filters.h syslog-ng-1.4.17/src/strcasecmp.c syslog-ng-1.4.17/src/filters.c.x syslog-ng-1.4.17/src/filters.h.x syslog-ng-1.4.17/src/afunix.c.x syslog-ng-1.4.17/src/afprogram.c syslog-ng-1.4.17/src/afprogram.h syslog-ng-1.4.17/src/log.h.x syslog-ng-1.4.17/src/cfg-grammar.c tar: Skipping to next header tar: Archive contains obsolescent base-64 headers gzip: stdin: invalid compressed data--crc error gzip: stdin: invalid compressed data--length error tar: Child returned status 1 tar: Error exit delayed from previous errors Are there any other sources for these than the balabit website? Anyone have any other ideas? Thanks, Stuart

1 0

libol & syslog-ng tarballs error out
by Douglas, Stuart 23 Jan '03

23 Jan '03

Hello, I'm running RH 7.3 and am not able to install from the tarballs. I've downloaded and attempted this several times, and the results are always the same. When I do a 'tar zxvf' on either file, they give the following: libol-0.2.23/ libol-0.2.23/src/ libol-0.2.23/src/gc.c libol-0.2.23/src/gc.h libol-0.2.23/src/io.c libol-0.2.23/src/io.h libol-0.2.23/src/list.h.x libol-0.2.23/src/xalloc.c libol-0.2.23/src/xalloc.h libol-0.2.23/src/jpoll.c libol-0.2.23/src/jpoll.h libol-0.2.23/src/read_line.c libol-0.2.23/src/read_line.h libol-0.2.23/src/resource.c libol-0.2.23/src/resource.h libol-0.2.23/src/werror.c tar: Skipping to next header tar: Archive contains obsolescent base-64 headers gzip: stdin: invalid compressed data--crc error gzip: stdin: invalid compressed data--length error tar: Child returned status 1 tar: Error exit delayed from previous errors ...and... syslog-ng-1.4.17/ syslog-ng-1.4.17/doc/ syslog-ng-1.4.17/doc/sgml/ syslog-ng-1.4.17/doc/sgml/syslog-ng.html.tar.gz syslog-ng-1.4.17/doc/sgml/syslog-ng.ps syslog-ng-1.4.17/doc/sgml/Makefile.am syslog-ng-1.4.17/doc/sgml/Makefile.in syslog-ng-1.4.17/doc/sgml/syslog-ng.dvi syslog-ng-1.4.17/doc/sgml/syslog-ng.txt syslog-ng-1.4.17/doc/sgml/syslog-ng.sgml syslog-ng-1.4.17/doc/syslog-ng.conf.sample syslog-ng-1.4.17/doc/syslog-ng.8 syslog-ng-1.4.17/doc/syslog-ng.conf.5 syslog-ng-1.4.17/doc/syslog-ng.old.txt syslog-ng-1.4.17/doc/syslog-ng.conf.solaris syslog-ng-1.4.17/doc/syslog-ng.conf.demo syslog-ng-1.4.17/doc/Makefile.am syslog-ng-1.4.17/doc/Makefile.in syslog-ng-1.4.17/doc/stresstest.sh syslog-ng-1.4.17/src/ syslog-ng-1.4.17/src/center.c syslog-ng-1.4.17/src/center.h syslog-ng-1.4.17/src/afunix.c syslog-ng-1.4.17/src/cfg-lex.c syslog-ng-1.4.17/src/cfg-lex.l syslog-ng-1.4.17/src/afuser.c syslog-ng-1.4.17/src/afuser.h syslog-ng-1.4.17/src/afprogram.c.x syslog-ng-1.4.17/src/afstreams.c.x syslog-ng-1.4.17/src/afinter.c syslog-ng-1.4.17/src/afinter.h syslog-ng-1.4.17/src/afsocket.c syslog-ng-1.4.17/src/afsocket.h syslog-ng-1.4.17/src/log.c syslog-ng-1.4.17/src/log.h syslog-ng-1.4.17/src/tests/ syslog-ng-1.4.17/src/tests/testall syslog-ng-1.4.17/src/tests/syslog-ng.conf.eval syslog-ng-1.4.17/src/tests/Makefile.am syslog-ng-1.4.17/src/tests/Makefile.in syslog-ng-1.4.17/src/tests/test.eval syslog-ng-1.4.17/src/syslog-ng.h syslog-ng-1.4.17/src/filters.c syslog-ng-1.4.17/src/filters.h syslog-ng-1.4.17/src/strcasecmp.c syslog-ng-1.4.17/src/filters.c.x syslog-ng-1.4.17/src/filters.h.x syslog-ng-1.4.17/src/afunix.c.x syslog-ng-1.4.17/src/afprogram.c syslog-ng-1.4.17/src/afprogram.h syslog-ng-1.4.17/src/log.h.x syslog-ng-1.4.17/src/cfg-grammar.c tar: Skipping to next header tar: Archive contains obsolescent base-64 headers gzip: stdin: invalid compressed data--crc error gzip: stdin: invalid compressed data--length error tar: Child returned status 1 tar: Error exit delayed from previous errors Are there any other sources for these than the balabit website? Anyone have any other ideas? Thanks, Stuart

1 0

remote wtmp logging
by paul.reilly＠tcd.ie 23 Jan '03

23 Jan '03

Does syslog-ng support enable remote wtmp logging? If so, with pipe or file or how? Thanks Paul

1 0

syslog-ng 1.9.1 released
by Balazs Scheidler 23 Jan '03

23 Jan '03

Hi, I have released syslog-ng 1.9.1 which is the first member of the 1.9.x branch. In this branch syslog-ng is reimplemented from scratch. Documentation is even more scarce than for syslog-ng 1.5.x so it is recommended to experienced users only. The program itself is in ALPHA state which means that it runs seems to work but almost certainly leaks memory. You can fetch this version by pointing your browser to http://www.balabit.hu/en/downloads/syslog-ng/downloads/ Backward compatibility was kept where possible, but some minor incompatibilies might be possible. Here is the NEWS entry for the never-released 1.9.0 and 1.9.1 which contains a summary of the new features present in this release. Feedback is appreciated. News for the 1.9.1 release Wed, 22 Jan 2003 12:13:44 +0100 This release is still not intended for production use. It has a good number of new features and a couple of them may not be stable enough. New features: * template declarations, the possibility to define a template once and refer to it * flow controlled log paths work, and they are also configurable * supports RFC3339 timestamps with second fractions and time zones, time zone conversion & source time zone specification * MARK messages are generated * keep alive for connections as well as listeners * the ability to follow log files as they are written to * the possibility to mark parts of a message using standard '(' and ')' regexp operators and refer to matches within templates (either filenames or content) This program is still ALPHA. News for the 1.9.0 release Thu, 9 May 2002 20:01:11 +0200 This release is the first release of the new reimplementation of syslog-ng. I moved to using glib instead of libol, as glib is more mature and provides several nice & easy to use features. Here's a bunch of nice things about 1.9.0: * supports flow controlled log paths (still not possible to configure it, but the code exists in the core) * better support for macros (macro support is moved out of affile, thus any other drivers may use it) * more robust detection of closed destination sockets (a closed channel is immediately detected, not at the first write) This avoids losing a log message when the connection is broken. * supports respawning destination programs (should be used with care to avoid DoS situations). This makes it easier to integrate third party extensions to syslog-ng. (SQL backends, on-line log analysis etc) * performance improvements, instead of using linear lookup in linked lists, I use hashtables everywhere. * the ability to define unparsed sources, makes it easier to integrate things like Apache logs * many internal reorganizations to make it easier to implement things like hashed log files, SSL protected TCP sessions and so on. Things still missing: * there are some new features with no configuration interface * internal messages always go to /dev/stderr * Sun's STREAMS is not yet supported 1.9.0 is currently in an ALPHA state, it's been tested only on my development computer, and not real-life traffic. -- Bazsi PGP info: KeyID 9AF8D0A9 Fingerprint CD27 CFB0 802C 0944 9CFD 804E C82C 8EB1

3 3

doesn't write to file after logrotate
by Markus Schabel 23 Jan '03

23 Jan '03

Hello! I've configured some destinations (e.g. /var/log/syslog, /var/log/cron.log, /var/log/dhcp.log) - all the same. Then I've configured logrotate to rotate all these logs and automatically create a new one after rotating. The syslog-ng and logrotate-configurations for these files are exactly the same (just the filters are different), and it works fine for all except /var/log/dhcp.log. After it is rotated, syslog-ng doesn't write to it anymore, for the other log's it does. If I restart syslog-ng, it starts logging to /var/log/dhcp.log again. Always restarting syslog-ng after rotating dhcp.log isn't really a solution, are there any hints what I can do to solve this problem? regards Markus Schabel +--------------------------------------------+ | TGM - Die Schule der Technik, IT-Service | | A-1200 Wien, Wexstrasse 19-23 | | Tel.: +43(1)33126/316 Fax: +43(1)33126/154 | | eMail: markus.schabel(a)tgm.ac.at | | markus.schabel(a)member.fsf.org | | FSF Associate Member #597 | | Linux User #259595 (http://counter.li.org) | +--------------------------------------------+ Computers are like airconditioners: They stop working properly if you open windows.

1 0

REPLY NEEDEDS_URGENT
by PATRICK KOFI 23 Jan '03

23 Jan '03

ASSISTANCE WE ARE MEMBERS OF A SPECIAL COMMITTEE FOR BUDGET AND PLANNING OF THE NIGERIA NATIONAL PETROLEUM CORPORATION (NNPC)IN WEST AFRICA. THIS COMMITTEE IS PRINCIPALLY CONCERNED WITH CONTRACT AWARDS AND APPROVAL. WITH OUR POSITIONS, WE HAVE SUCCESSFULLY SECURED FOR OURSELVES THE SUM OF THIRTHY ONE MILLION, FIVE HUNDRED THOUSAND UNITED STATES DOLLARS (US$31.5M). THIS AMOUNT WAS CAREFULLY MANIPULATED BY OVER-INVOICING OF AN OLD CONTRACT. BASED ON INFORMATION GATHERED ABOUT YOU, WE BELIEVE YOU WOULD BE IN A POSITION TO HELP US IN TRANSFERING THIS FUND (US$31.5M) INTO A SAFE ACCOUNT. IT HAS BEEN AGREED THAT THE OWNER OF THE ACCOUNT WILL BE COMPENSATED WITH 30% OF THE REMITTED FUNDS, WHILE WE KEEP 60% AS THE INITIATORS AND 10% WILL BE SET ASIDE TO OFFSET EXPENSES AND PAY THE NECESSARY TAXES.WE INTEND TO USE PART OF OUR OWN SHARE TO IMPORT FROM YOUR COUNTRY AGRICULTURAL AND CONSTRUCTION MACHINERY. THIS IS BECAUSE THE PRESENT GOVERNMENT OF MY COUNTRY IS EMPHASISING ON PROVIDING FOOD AND HOUSING FOR ALL ITS CITIZENS BEFORE THE NEXT ELECTION. HENCE, AGRICULTURAL AND CONSTRUCTION EQUIPMENT ARE IN HIGH DEMAND OVER HERE. WE SHALL ALSO NEED YOUR ASSISTANCE IN THIS REGARD ON A COMMISSION TO BE AGREED UPON WHEN WE FINALLY MEET. ALL MODALITIES OF THIS TRANSACTION HAVE BEEN CAREFULLY WORKED OUT AND ONCE STARTED WILL NOT TAKE MORE THAN SEVEN (7) WORKING DAYS, WITH YOUR FULL SUPPORT. THIS TRANSACTION IS 100% RISK FREE. MOREOVER, WE SHALL NEED THE FOLLOWING FROM YOU TO ENABLE US BEGIN THE TRANSACTION FORMALLY. THEY ARE; YOUR FULL NAME AND ADDRESS OR YOUR COMPANY NAME, ADDRESS AND TELEPHONE/FAX NUMBERS, YOUR BANKERS NAME AND ADDRESS, YOUR ACCOUNT NUMBER AND NAME. THIS INFORMATION WILL BE USED ALONGSIDE OTHER VITAL DOCUMENTS OVER HERE IN PREPARING THE NECESSARY APPLICATION FOR PAYMENT TO THE CONCERNED QUARTERS WHERE PAYMENT APPROVALS WOULD BE SECURED IN FAVOUR OF YOUR COMPANY FOR THE PAYMENT OF OUR FUND(US$31.5M) INTO YOUR NOMINATED ACCOUNT FOR US ALL. BY OUR APPLICATION, IT WILL BE ASSUMED THAT THIS SUM IS BEING REQUESTED AS PAYMENT, WHICH IS LONG-OUTSTANDING, FOR A CONTRACT, WE SHALL CLAIM WITH OUR POSITION, YOU OR YOUR COMPANY EXECUTED FOR (NNPC) SOMETIME IN 1997. HENCE, WE SHALL FOLLOW ALL THE LEGAL OFFICIAL PROTOCOLS USUALLY OBSERVED BY FOREIGN CONTRACTORS WHENEVER THEY ARE DEMANDING PAYMENT FOR CONTRACTS EXECUTED FOR THE GOVERNMENT OF MY COUNTRY. FURTHERMORE, IMMEDIATELY THE FINAL APPROVAL IS GRANTED, THE FUND WILL BE TRANSFERRED INTO YOUR ACCOUNT WITHIN 72 HOURS, BY WHICH TIME MY PARTNERS AND I WILL BE IN YOUR COUNTRY FOR THE FINAL DISBURSEMENT IN THE RATIO ALREADY SPELT OUT TO YOU. PLEASE, YOU SHOULD ENDEAVOUR TO GIVE US AN ACCOUNT WHICH YOU HAVE ABSOLUTE CONTROL OVER. THIS IS VERY IMPORTANT BECAUSE WE WOULD NOT WANT A SITUATION WHEN THE MONEY IS IN THE ACCOUNT, YOU NOW TELL US YOU WOULD NEED TO BE AUTHORISED BY ANOTHER PERSON BEFORE WE CAN HAVE OUR OWN SHARE. YOU WILL NOT BE REQUIRED TO TRAVEL OUT OF YOUR COUNTRY, ME AND MY PARTNERS, WE TRAVEL DOWN TO YOUR COUNTRY FOR THE DISBURSEMENT OF THE FUND, AFTER THE FINAL TRANSACTION. WE WILL ALSO DISCUSS ABOUT OIL BUSINEES IN MY COUNTRY WHEN WE COME DOWN OVER THERE. BECAUSE WE WOULD LIKE TO ESTABLISH A JOINT BUSINESS WITH YOU. THAT IS WE WILL USE YOUR NAME TO REGISTER AND INCORPORATE AN OIL COMPANY IN MY COUNTRY. BESIDES, ON THE COMPLETION OF THIS TRANSFER, ALL DOCUMENTS USED FOR THE PURPOSE WILL BE WITHDRAWN FROM THE QUARTERS THEY ARE SUBMITTED BY OUR CONTACTS IN THESE OFFICES AND DESTROYED, THEREAFTER. SO, THERE WILL NOT BE ANY PROBLEM ARISING FROM THIS TRANSACTION NOW OR IN THE FUTURE. IF THIS PROPOSAL SATISFIES YOU, PLEASE REACH US ONLY BY EMAIL FOR MORE INFORMATION. PLEASE, TREAT AS URGENT AND VERY IMPORTANT. YOURS FAITHFULLY, DR.PATRICK KOFI.

1 0

RE: [syslog-ng]does syslog-ng conflict with syslogd? how avoid
by Hamilton, Andrew 22 Jan '03

22 Jan '03

Yes it will do that transparently. There is a lot of help here: http://www.campin.net/syslog-ng/faq.html Regards, Drew -----Original Message----- From: seberino(a)spawar.navy.mil [mailto:seberino@spawar.navy.mil] Sent: Wednesday, January 22, 2003 3:10 PM To: syslog-ng(a)lists.balabit.hu Subject: [syslog-ng]does syslog-ng conflict with syslogd? how avoid I just installed syslog-ng. If I kill syslogd and start the syslog-ng daemon will it capture messages from apps trying to talk to syslogd transparently??? So to avoid conflicts and compatibility problems I just have to kill syslogd and swap in the new daemon??? That would be great if so.... then if I could get syslog-ng.conf done right I'm in business!! Chris -- _______________________________________ Dr. Christian Seberino SPAWAR Systems Center San Diego Code 2363 49590 Lassing Road, Room A339 San Diego, CA 92152-6147 U.S.A. Phone: (619) 553-7940 Fax: (619) 553-1269 Email: seberino(a)spawar.navy.mil _______________________________________ _______________________________________________ syslog-ng maillist - syslog-ng(a)lists.balabit.hu https://lists.balabit.hu/mailman/listinfo/syslog-ng Frequently asked questions at http://www.campin.net/syslog-ng/faq.html

1 0