June 2006 - syslog-ng - lists.balabit.hu

1.9.11 compile failure on Solaris 2.6/7
by Albert Chin 01 Jun '06

01 Jun '06

Seems AF_INET6 is used unconditionally in src/cfg-grammar.y: source_afsocket : KW_UNIX_DGRAM '(' source_afunix_dgram_params ')' { $$ = $3; } | KW_UNIX_STREAM '(' source_afunix_stream_params ')' { $$ = $3; } | KW_UDP { last_addr_family = AF_INET; } '(' source_afinet_udp_params ') ' { $$ = $4; } | KW_TCP { last_addr_family = AF_INET; } '(' source_afinet_tcp_params ') ' { $$ = $4; } | KW_UDP6 { last_addr_family = AF_INET6; } '(' source_afinet_udp_params ')' { $$ = $4; } | KW_TCP6 { last_addr_family = AF_INET6; } '(' source_afinet_tcp_params ')' { $$ = $4; } ; A build on solaris 2.6/7 fails with: cc -DHAVE_CONFIG_H -I. -I. -I.. -DPATH_SYSCONFDIR=\"/etc/opt/TWWfsw/syslogng1911\" -DPATH_LOCALSTATEDIR=\"/var/opt/TWWfsw/syslogng1911\" -I/opt/TWWfsw/libglib26/include -I/opt/TWWfsw/libglib26/lib/include -I/opt/TWWfsw/gettext014/include -I/opt/TWWfsw/syslogng1911/include/eventlog -D_GNU_SOURCE -mr -Qn -xstrconst -xO2 -xtarget=ultra2 -xarch=v8plusa -c cfg-grammar.c "/home/bazsi/zwa/work/syslog-ng-2.0/syslog-ng/src/cfg-grammar.y", line 303: undefined symbol: AF_INET6 "/home/bazsi/zwa/work/syslog-ng-2.0/syslog-ng/src/cfg-grammar.y", line 304: undefined symbol: AF_INET6 "/home/bazsi/zwa/work/syslog-ng-2.0/syslog-ng/src/cfg-grammar.y", line 539: undefined symbol: AF_INET6 "/home/bazsi/zwa/work/syslog-ng-2.0/syslog-ng/src/cfg-grammar.y", line 540: undefined symbol: AF_INET6 cc: acomp failed for cfg-grammar.c -- albert chin (china(a)thewrittenword.com)

1 0

1.9.11 compile failure on IRIX 6.5, Tru64 UNIX 5.1
by Albert Chin 01 Jun '06

01 Jun '06

Seems like IRIX 6.5 and Tru64 UNIX 5.1 don't have IPV6_ADD_MEMBERSHIP. They do have IP_ADD_MEMBERSHIP though. Should we just: #ifndef IPV6_ADD_MEMBERSHIP #define IPV6_ADD_MEMBERSHIP IP_ADD_MEMBERSHIP #endif cc -DHAVE_CONFIG_H -I. -I. -I.. -DPATH_SYSCONFDIR=\"/etc/opt/TWWfsw/syslogng1911\" -DPATH_LOCALSTATEDIR=\"/var/opt/TWWfsw/syslogng1911\" -I/opt/TWWfsw/libglib26/include -I/opt/TWWfsw/libglib26/lib/include -I/opt/TWWfsw/gettext014/include -I/opt/TWWfsw/syslogng198/include/eventlog -D_GNU_SOURCE -Wl,-woff,84 -Wl,-woff,85 -woff 1009,1429 -use_readonly_const -G0 -rdata_shared -DEBUG:optimize_space=ON -O2 -OPT:Olimit=0 -c afinet.c cc-1020 cc: ERROR File = afinet.c, Line = 190 The identifier "IPV6_ADD_MEMBERSHIP" is undefined. setsockopt(fd, IPPROTO_IPV6, IPV6_ADD_MEMBERSHIP, &mreq6, sizeof(mreq6)); ^ 1 error detected in the compilation of "afinet.c". -- albert chin (china(a)thewrittenword.com)

2 2

syslog-ng[3933]: STATS: dropped 1074
by ashish tyagi 01 Jun '06

01 Jun '06

hi all I am using syslog-ng and php-syslog-ng with mysql to store logs on fedora core 4. i installed it using RPM for fedora 4. it is being used as a central loging server.in /var/log/messages a message appeares regularly "syslog-ng[3933]: STATS: dropped 1027".what does this message means, is it dropping messages comming from other servers.if i have done something wrong. i have attached syslog-ng configuration file. Thanks & Regards Ashish Tyagi

2 1

1.9.11 compile failure on HP-UX 11.23 and AIX 5.x
by Albert Chin 01 Jun '06

01 Jun '06

I'm getting the same compile failure on HP-UX and AIX using the vendor compiler: xlc -DHAVE_CONFIG_H -I. -I. -I.. -DPATH_SYSCONFDIR=\"/etc/opt/TWWfsw/syslogng1911\" -DPATH_LOCALSTATEDIR=\"/var/opt/TWWfsw/syslogng1911\" -I/opt/TWWfsw/libglib26/include -I/opt/TWWfsw/libglib26/lib/include -I/opt/TWWfsw/gettext014/include -I/opt/TWWfsw/syslogng1911/include/eventlog -D_GNU_SOURCE -O2 -ma -qro -qroconst -qmaxmem=-1 -qarch=com -c afinet.c "/usr/include/alloca.h", line 34.1: 1506-224 (I) Incorrect pragma ignored. "afinet.c", line 183.13: 1506-021 (S) Expecting struct or union. gmake[2]: *** [afinet.o] Error 1 gmake[2]: Leaving directory `/opt/build/syslog-ng-1.9.11/src' The problem is the following line: if (IN6_IS_ADDR_MULTICAST(g_sockaddr_inet6_get_address(addr)->s6_addr)) On AIX, from <netinet/in.h>: #define IN6_IS_ADDR_MULTICAST(p) IS_MULTIADDR6(*p) #define IS_MULTIADDR6(a) ((a).s6_addr8[0] == 0xff) #define s6_addr8 u6_addr.u6_addr8 #define s6_addr u6_addr.u6_addr8 So, IN6_IS_ADDR_MULTICAST(addr) is converted to IS_MULTIADDR6(*addr) and then: ((*addr).u6_addr.u6_addr8[0] == 0xff So, because addr == g_sockaddr_inet6_get_address(addr)->s6_addr, we get the following expansion: if (((*g_sockaddr_inet6_get_address(addr)->u6_addr.u6_addr8).u6_addr.u6_addr8[0] == 0xff)) The Redhat Linux definition is: #define IN6_IS_ADDR_MULTICAST(a) (((__const uint8_t *) (a))[0] == 0xff) The HP-UX 11.23 definition is: #define IN6_IS_ADDR_MULTICAST(i) ((((i)->s6_addr[0] ^ 0xff) \ | ((i)->s6_addr[1] & 0xe0)) == 0) ntp-4.2.0a also uses IN6_IS_ADDR_MULTICAST but does the following: if (IN6_IS_ADDR_MULTICAST(&((struct sockaddr_in6*)srcadr)->sin6_addr)) -- albert chin (china(a)thewrittenword.com)

2 2