September 2003 - syslog-ng - lists.balabit.hu

RE: [syslog-ng]New user of syslog-ng..problems with installation
by Hamilton Andrew 16 Sep '03

16 Sep '03

Christoph, What is your platform? Could you include the make output? You normally don't need scsh unless you are actually changing something in the code. Regards, Drew -----Original Message----- From: Christoph.Eckart(a)COMPUTACENTER.COM [mailto:Christoph.Eckart@COMPUTACENTER.COM] Sent: Tuesday, September 16, 2003 10:55 AM To: syslog-ng(a)lists.balabit.hu Subject: [syslog-ng]New user of syslog-ng..problems with installation Hello everybody, I am a new user of syslog-ng. I tried a lot to install the package however kept getting warnings saying "nothing to be done" "leaving directory".I also downloaded the compatible version of libol and also scsh. I found a similar problem with someone else on the mailing list and reading the answer , I downloaded scsh. Could anyone please help ?? Thanks a lot, Best regards Christoph Eckart This email is confidential. If you are not the intended recipient, you must not disclose or use the information contained in it. If you have received this mail in error, please tell us immediately by return email and delete the document. _______________________________________________ syslog-ng maillist - syslog-ng(a)lists.balabit.hu https://lists.balabit.hu/mailman/listinfo/syslog-ng Frequently asked questions at http://www.campin.net/syslog-ng/faq.html

1 0

New user of syslog-ng..problems with installation
by Christoph.Eckart＠COMPUTACENTER.COM 16 Sep '03

16 Sep '03

Hello everybody, I am a new user of syslog-ng. I tried a lot to install the package however kept getting warnings saying "nothing to be done" "leaving directory".I also downloaded the compatible version of libol and also scsh. I found a similar problem with someone else on the mailing list and reading the answer , I downloaded scsh. Could anyone please help ?? Thanks a lot, Best regards Christoph Eckart This email is confidential. If you are not the intended recipient, you must not disclose or use the information contained in it. If you have received this mail in error, please tell us immediately by return email and delete the document.

1 0

Failed Assertion Error
by Dennis Skinner 11 Sep '03

11 Sep '03

Hello all, I found reference to this error for people using syslog-ng 1.4.x, but looking through the list archives, I don't see any reference to it recently. I start syslog-ng and after a few minutes, I get something similar to: syslog:io.c:263: failed assertion `i == nfds' I got this with syslog-ng 1.5 and 1.6 rc3. Both are using libol 0.3.10. This is on a base redhat 9 install. Any ideas? -- Dennis Skinner Systems Administrator BlueFrog Internet http://www.bluefrog.com

3 10

logging woes
by Roger 10 Sep '03

10 Sep '03

I'm using syslog-ng v1.9.1+ and am having some trouble getting the behavior of syslog-ng down. I took this syslog-ng.conf file from a sun - hense the sun-streams reference - and put it on a linux system. With this on the sun, any syslog message from host a.b.c.d would be put in the directory /var/log/syslog-ng/hostname/messages Instead I'm getting all local syslog messages just fine BUT any remote messages aren't getting through. I did a lsof -Pni and syslog-ng IS listening on ports 514 both tcp and udp - I even created the directories and messages file - chmoded the permissions to 777 - all to have no messages dumped to their respective directories. I started syslog-ng up w/ the options '-de' and sniffed the network. Packets are being sent to the daemon and the debug messages look as so log_reader_fd_prepare(); window_size='100' but still no directories creates or information put in files. Any ideas on what I'm doing wrong? options { # use_fqdn (yes); #makes log names to long use_dns (yes); create_dirs (yes); log_fifo_size (1000); }; source local { unix-stream("/dev/log"); }; #source local { sun-streams("/dev/log" door("/etc/.syslog_door")); internal(); }; source udp_net { udp(); }; source tcp_net { tcp(); }; destination all { file("/var/log/syslog-ng/messages" owner (root) group (wheel) perm (0640) ); }; destination network { file("/var/log/syslog-ng/$HOST/messages" owner (root) group (wheel) dir_group (wheel) perm (0640) dir_perm (0750) ); }; log { source(local); destination(all); }; log { source(tcp_net); source(udp_net); destination(network); };

2 1

problem with syslog-ng
by Suchun Wu 08 Sep '03

08 Sep '03

I'm trying to use syslog-ng-1.6.0rc3 on Solaris8. The compilation and installation passed. But when I run the start-up script, I got the following: sun-door support is not compiled in, door=/etc/.syslog_door Error initializing configuration, exiting. Any help is appreciated Suchun

1 0

syslog-ng and IPSEC does anyone have any experiences eit the combination?
by Marc Spitzer 08 Sep '03

08 Sep '03

I am doing some logging infrastructure research and I am looking into syslog-ng and IPSEC, does any experience with this setup? Thanks marc -- NOTICE: If received in error, please destroy and notify sender. Sender does not waive confidentiality or privilege, and use is prohibited.

2 1

Annie Chaiyakul/it/idecpharm/US is out of the office.
by Annie Chaiyakul 08 Sep '03

08 Sep '03

I will be out of the office starting 09/07/2003 and will not return until 09/15/2003. I will out of office until 09/15/03. For immediate issues, please contact the IT help desk and for urgent UNIX specific needs, please contact Emily Yau. Thank you.

1 0

Syslogd and Syslog-ng shareing ports.
by Jay Davis 07 Sep '03

07 Sep '03

I tested quite a bit with syslogd and syslog-ng and am now having a problem. I need syslogd and syslog-ng to share port 514 for inbound syslog messages. When I tested in the lab this was not a problem. Now it seems the only way I can get syslog-ng to listen to the correct IPaddress port pair is to specify that port in the config file. When I do this syslog-ng takes over port 514 and syslogd can not listen anymore :( Here is the config slightly sanitized. Any ideas? This is on solaris 2.8 standard build with all good patches. options { sync (0); time_reopen (10); log_fifo_size (1000); long_hostnames (off); use_dns (yes); dns_cache_size(1000); dns_cache_expire_failed(5); use_fqdn (no); create_dirs (no); keep_hostname (yes); }; source s_sys { sun-streams ("/dev/log" door("/etc/.syslog_door")); internal(); }; #source s_udpmessages {udp(ip(SPECIFIC IP) port(514));}; source s_udpmessages {udp(ip(0.0.0.0) port(514));}; destination l_mesg { file("/export/epm/syslog-ng/logs/local.log"); }; destination d_mesg { file("/export/epm/syslog-ng/logs/network.log"); }; destination d_acpt { udp("LOWER ENVIRON IP" port(514)); }; filter f_filter5 { facility(local5) and level(emerg,alert,crit,err,warning,notice,info); }; filter f_filter6 { facility(local6) and level(emerg,alert,crit,err,warning,notice,info); }; filter f_filter7 { facility(local7) and level(emerg,alert,crit,err,warning,notice,info); }; log { source(s_udpmessages); filter(f_filter5); destination(d_mesg); }; log { source(s_udpmessages); filter(f_filter6); destination(d_mesg); }; log { source(s_udpmessages); filter(f_filter7); destination(d_mesg); }; log { source(s_udpmessages); filter(f_filter5); destination(d_acpt); }; log { source(s_udpmessages); filter(f_filter6); destination(d_acpt); }; log { source(s_udpmessages); filter(f_filter7); destination(d_acpt); };

1 0

Re: syslog-ng digest, Vol 1 #1034 - 12 msgs (Vacation)
by TIM MOORE 06 Sep '03

06 Sep '03

FYI: I will be out on vacation from 8/28 until 9/8. Please contact the NOC if you need immediate assistance. Thanks, Tim Moore

1 0

AIX Problem with wait.c and getopt.h
by Jose Tomas Garcia 06 Sep '03

06 Sep '03

I obtain tne next error: #> make make all-recursive Making all in src gcc -DHAVE_CONFIG_H -I. -I. -I.. -I/usr/local/include/glib-2.0 -I/usr/local/lib/glib-2.0/include -D_GNU_SOURCE -Wall -g -c main.c main.c:39: wait.h: A file or directory in the path name does not exist. main.c:42: getopt.h: A file or directory in the path name does not exist. make: 1254-004 The error code from the last command is 1. Stop. make: 1254-004 The error code from the last command is 1. Stop. make: 1254-004 The error code from the last command is 2. Stop. ---------------------------------- I'm using: AIX 4.3.3 syslog-ng-1.9.1 flex-2.5.4a-6 gcc-2.9.aix51.020209-1 g++-2.9.aix51.020209-1 bison-1.34-2 automake-1.5-1 m4-1.4-14 autoconf-2.53-1 MySQL-client-3.23.47-3 MySQL-3.23.47-3 What is the problem? Regards, ===== -- Jose Tomas Garcia Caceres Caracas-Venezuela +58(2)910-7719 _________________________________________________________ Do You Yahoo!? La mejor conexión a internet y 25MB extra a tu correo por $100 al mes. http://net.yahoo.com.mx

1 0