- syslog-ng - lists.balabit.hu

Re: syslog-ng vs (of all things) Win2k + IIS
by wolfgang.braun＠gmx.de 21 Oct '00

21 Oct '00

Some thoughts to this. I refer to the machine collecting logs as server, the machines writing logs to it as clients. 1) TCP Connections syslog-ng uses persistent connections to clients logging to the server. It has been argued that TCP has some overhead over UDP. Now imagine you have 300 clients logging to your web server/CGI. Using HTTP you have to create a new connection every time a client wants to write logs to your server. If persistent TCP has _some_ overhead, this can only be called *huge* 2) Calling CGI Every time you want to log to the server it has to exec your CGI. 300 clients logging simultaneously, each forcing the server to exec the CGI over and over again. There's a reason people came up with ASP, PHP, embedded <script> and servlets: overhead in loading, linking and executing the called program. It get's even worse when you're using an interpreted language, since then every time the interpreter has to be loaded again. 3) File handling syslog opens local files once, keeps the fd and flushes its message queues from time to time. With CGI you have to open,write,close your files everytime a client delivers his logs. 4) Managing logs on the server with generic syslog you have some liberty to define which logs get written to which file, based on priority, facility or even regexps. on the opposit you're very limited on where you write to. if you let each instance of your CGI write to a file i imagine it could get a bit messy. Even if you build a system as proposed (HTTP+CGI), and the server can handle all that overhead the question remains if your homegrown system proves to be anywhere near as reliable as a piece of software that has been specifically designed for the task. -- Those who do not understand Unix are condemned to reinvent it, poorly. -- Henry Spencer

1 0

RE: [syslog-ng]global options problems on Solaris 7/sparc
by Tom Wells 21 Oct '00

21 Oct '00

> -----Original Message----- > From: Chris Scheller [mailto:schelcj@pobox.com] > > > perm(0600); > > dir_perm(0755); > someone correct me if i am wrong, but the perm options > belong in your > destination statement. here is an example from my conf > > destination d_faci { > file("/var/log/syslog-ng/$YEAR/$MONTH/$DAY/$FACILITY" > perm(0600)); > }; There should be some globals..... It sucks to have to list the same things 30 times, both for local and remote destinations (on this loghost, anyways). Why can't there be a options { files (owner(root) group(root) perm(0640) dir_perm(0755)); }; as a global option???? It would sure help to keep things a tad bit simpler and cleaner..... Tom

1 0

global options problems on Solaris 7/sparc
by Tom Wells 21 Oct '00

21 Oct '00

Hi, I'm putting the following items in the global options section, but syslog-ng keeps complaining about parse errors in my config file, specifically the "owner", "group", "perm", and "dir_perm" options. I'm running libol-0.2.20 and syslog-ng.1.4.7, though it happened with libol-0.2.19 and syslog-ng.1.4.5 as well: ############################# # options ############################# options { use_dns(yes); use_fqdn(no); long_hostnames(off); sync(0); create_dirs(yes); owner(0); group(1); perm(0600); dir_perm(0755); }; Any help would be most appreciated. Tom -- Tom Wells Raza Foundries, Inc. email: twells(a)razafoundries.com Sr. Systems Administrator phone: 408-434-5544

2 1

Buffering to a program.
by Mahlon Smith 21 Oct '00

21 Oct '00

My eventual goal is to have one 'logging server', receiving logs from all of the other servers around here, and parsing/pushing them into a mysql database. I've got the general topology setup and working - and a perlscript that syslog-ng is pumping the logs to - which in turn is doing the mysql writing. Working fine, except I'd like to control the amount of buffering before it hits the perl program. I have '$| = 1;' in my perl prog, so perl isn't doing the buffering.. it's gotta be syslog-ng. sync(0) is set - and appears to work fine to flat files - just not to a forked program. In fact, I don't really even see it start to write out the buffer to the perl prog until I HUP the syslog-ng process. (which obviously isn't going to help me in the long run.) Any tips/suggestions are appreciated. -Mahlon -- Mahlon Smith InternetCDS http://www.internetcds.com

1 0

RE: [syslog-ng]Syslog-ng dies unexpectedly
by Ohrberg, Mick 13 Oct '00

13 Oct '00

I apologize - this question has been answered. I sent this email two days ago! "Sent: Wednesday, October 11, 2000 12:53 PM" -Mick > -----Original Message----- > From: Ohrberg, Mick > Sent: Wednesday, October 11, 2000 12:53 PM > To: 'syslog-ng(a)lists.balabit.hu' > Subject: RE: [syslog-ng]Syslog-ng dies unexpectedly > > > [snip] > > > Also, I'm running a program that logs NT-events in syslog > format and I > > want to create a separate SINGLE "error" log from multiple machines. > > What would the format for that be? Does a simple filter > and log match > > statement work? > > > > destination ntlog { file("/var/log/ntlog.log"); }; > > filter f_error { match("[ERR]"); }; > > #( [ERR] is the common statement in the NT log statement > for error logs) > > > > log { source(net); filter(f_error); destination(ntlog); }; > > [snip] > > Jon, > > Does your NT logger use one of the facility/priority pairs > available? I know > we do a lot of logging using the different user-facilities. > If your NTlogger > uses that, you can filter by facility as well. > > /Mick > > _______________________________________________ > syslog-ng maillist - syslog-ng(a)lists.balabit.hu > https://lists.balabit.hu/mailman/listinfo/syslog-ng >

1 0

R: [syslog-ng]Syslog-ng dies unexpectedly
by Rossi Dario 12 Oct '00

12 Oct '00

Sorry i cant answer to your question, but could i know the name of the nt logging program? Thnx Dario > -----Messaggio originale----- > Da: jmad [mailto:than@wwa.com] > Inviato: mercoledì 11 ottobre 2000 19.15 > A: syslog-ng(a)lists.balabit.hu > Oggetto: [syslog-ng]Syslog-ng dies unexpectedly > > > I recently replaced my syslogd with syslog-ng on HP-UX 11.00. > > It was running great for about a week. > > I began adding more remote clients logging to it. > > Within the last day or so now it dies without explaination every few > minutes (3-15min). Where does syslog-ng default log to so I > can try to > figure out what's going wrong (or have any of you had this and fixed > it)? > > Also, I'm running a program that logs NT-events in syslog format and I > want to create a separate SINGLE "error" log from multiple machines. > What would the format for that be? Does a simple filter and log match > statement work? > > destination ntlog { file("/var/log/ntlog.log"); }; > filter f_error { match("[ERR]"); }; > #( [ERR] is the common statement in the NT log statement for error > logs) > > log { source(net); filter(f_error); destination(ntlog); }; > > Thanks for any help, > JonM > City of Evanston > > > _______________________________________________ > syslog-ng maillist - syslog-ng(a)lists.balabit.hu > https://lists.balabit.hu/mailman/listinfo/syslog-ng > ******************************************************************************************************** COLT Telecom SpA Sede Legale: Viale Jenner, 56 - 20159 Milano Tel. 02-303331 CF e P.IVA: 12286350157 - Reg.Imp. Milano n. 309043 - REA n. 154763 Il presente messaggio non costituisce un impegno contrattuale tra COLT Telecom S.p.A., le proprie Consociate od Affiliate ("COLT") ed il destinatario. Le opinioni ivi espresse sono quelle dell'autore. COLT non assume alcuna responsabilita riguardo al contenuto del presente messaggio. Il messaggio e destinato esclusivamente al destinatario. Il contenuto e gli allegati sono da considerarsi di natura confidenziale. Nel caso abbiate ricevuto il presente messaggio per errore, siete pregati di telefonare al numero indicato sopra. *********************************************************************************************************

2 1

RE: [syslog-ng]syslog-ng and Solaris
by Hamilton, Andrew Mr. 12 Oct '00

12 Oct '00

Depending on what you are using to log on the client, you can use the existing syslogd or syslog-ng for your client. I do a little of both. You can do a man of syslogd and syslogd.conf and that will give you pretty much all the format for the file and the way it works. Basically to forward logging to a loghost you just do something like: local0.info @loghost.mydomain.com That will send facility local0, level info messages to the loghost. And you do similar things for the other facilities you want to forward. For syslog-ng you just set up a destination with a hostname: destination d_loghost {host("loghost.mydomain.com"); }; then your log statement: log { source(src); filter(f_local0); filter(f_info); destination(d_loghost); }; Hope that helps. Drew > -----Original Message----- > From: dwarf(a)solarisresources.com [SMTP:dwarf@solarisresources.com] > Sent: Wednesday, October 11, 2000 1:36 AM > To: bazsil(a)balabit.hu > Cc: syslog-ng(a)lists.balabit.hu > Subject: [syslog-ng]syslog-ng and Solaris > > Hi There, > > I've managed to compile up syslog-ng on a Solaris 8 box and have a few > questions I hope you can answer: > > 1. I assume that I can kill the script that starts Solaris Syslogd with > no ill effects? > > 2. Can I set a startup script that runs syslog-ng as a daemon process. > > 3. I've got most of the options setup the way that I want them but can't > seem to figure out how to setup one or two machines as syslog servers and > a few dozen machines to forward all syslog messages to both of the syslog > servers. > > If you could pass along info on the above, that would be greatly > appreciated. > > thanks in advance, > alan > > _______________________________________________ > syslog-ng maillist - syslog-ng(a)lists.balabit.hu > https://lists.balabit.hu/mailman/listinfo/syslog-ng

1 0

RE: [syslog-ng]Syslog-ng dies unexpectedly
by Ohrberg, Mick 11 Oct '00

11 Oct '00

[snip] > Also, I'm running a program that logs NT-events in syslog format and I > want to create a separate SINGLE "error" log from multiple machines. > What would the format for that be? Does a simple filter and log match > statement work? > > destination ntlog { file("/var/log/ntlog.log"); }; > filter f_error { match("[ERR]"); }; > #( [ERR] is the common statement in the NT log statement for error logs) > > log { source(net); filter(f_error); destination(ntlog); }; [snip] Jon, Does your NT logger use one of the facility/priority pairs available? I know we do a lot of logging using the different user-facilities. If your NTlogger uses that, you can filter by facility as well. /Mick

1 0

Syslog-ng dies unexpectedly
by jmad 11 Oct '00

11 Oct '00

I recently replaced my syslogd with syslog-ng on HP-UX 11.00. It was running great for about a week. I began adding more remote clients logging to it. Within the last day or so now it dies without explaination every few minutes (3-15min). Where does syslog-ng default log to so I can try to figure out what's going wrong (or have any of you had this and fixed it)? Also, I'm running a program that logs NT-events in syslog format and I want to create a separate SINGLE "error" log from multiple machines. What would the format for that be? Does a simple filter and log match statement work? destination ntlog { file("/var/log/ntlog.log"); }; filter f_error { match("[ERR]"); }; #( [ERR] is the common statement in the NT log statement for error logs) log { source(net); filter(f_error); destination(ntlog); }; Thanks for any help, JonM City of Evanston

1 0

syslog-ng vs (of all things) Win2k + IIS
by matthew.copeland＠honeywell.com 11 Oct '00

11 Oct '00

This afternoon I was in a debate with another one of the software engineering guys here were I work. He has made the claim that for 300 machines each logging a message at least every 10 seconds (probably more like once every other second.) that encapsultaing the message in an XML tag and then sending that to a windblows 2000 box via HTTP running IIS, where it has to process the message using a CGI or ASP script, is more scalable than using syslog-ng, and that syslog-ng can't even handle this load. Now, I would beg to differ on this assesment, but I need to find some numbers to backup my claim. Can anyone help? (Ohh.. and you don't have to necessarily use an Intel box for the main server) Matthew M. Copeland Software Engineer matthew.copeland(a)honeywell.com

7 17

syslog-ng and Solaris
by dwarf＠solarisresources.com 11 Oct '00

11 Oct '00

Hi There, I've managed to compile up syslog-ng on a Solaris 8 box and have a few questions I hope you can answer: 1. I assume that I can kill the script that starts Solaris Syslogd with no ill effects? 2. Can I set a startup script that runs syslog-ng as a daemon process. 3. I've got most of the options setup the way that I want them but can't seem to figure out how to setup one or two machines as syslog servers and a few dozen machines to forward all syslog messages to both of the syslog servers. If you could pass along info on the above, that would be greatly appreciated. thanks in advance, alan

2 1

PTR lookups; leak/crash fixes
by Scott McDermott 10 Oct '00

10 Oct '00

Why does syslog-ng do a PTR lookup for EVERY message? It uses them for $HOST stuff? But why not cache these and avoid the lookup? At first I thought, the caching belongs in the libc, possibly in nscd. But despite nscd running (this is Linux with glibc-2.1), gethostbyaddr() still does a full name server PTR lookup for every single message. I started running a slave name server on the localhost just to avoid the bandwidth hit doing all these queries :) But now there is a bunch of extra CPU usage (syslog-ng has accumulated 600 minutes of CPU time after running for just one day; this is a 333Mhz machine and there are only a couple dozen logging hosts, most of which comes relayed through other syslog-ngs anyways). If I were to set use_dns to `no' this would probably make the problem go away. Is there any reason not to do this? Would I then get IPs for $HOST instead of names? Incidentally, the assert fix definitely got rid of the crashing, and the string free definitely fixed some memory leakage. But I have only been running it for one day and it's up to 6 meg VSZ so far (would have been 30 by now before the fix) ...hopefully this is just some data structures which will plateau out once it's been running for some time (xinetd does this in a big way ;)

3 2

HP-UX 11.0 configuration
by Mertz, Richard 03 Oct '00

03 Oct '00

I have compiled syslog-ng on my HP-UX 11.0 box. Now I could really use some help configuring it. Any pointers? Richard Mertz City of Evanston

1 0

Answer to the reliability problem
by Jeffrey W. Baker 30 Sep '00

30 Sep '00

Well, I have found the answer to the reliability problem! The flaw is in this code in pkt_buffer.c: static int do_write_str(struct abstract_write *c, struct ol_string *string) { CAST(pkt_buffer, self, c); debug("do_write_str\n"); if (self->super.closed) { ol_string_free(string); return ST_FAIL | ST_CLOSE; } if (self->queue_size == self->queue_max) { /* fifo full */ ol_string_free(string); return ST_FAIL | ST_OK; } So you can see that when the queue is full, the messages simply get dropped. That's bad! The solution is to flush the queue when it is full, and then continue looping over the available input. The question is, what code should be responsible for doing this flushing? Shouldn't some piece of code be checking for the ST_FAIL return code? Cheers, Jeffrey

2 2

Doubt !!
by Kleyson Rios 29 Sep '00

29 Sep '00

The expression : log { source(src); filter(f_mail); filter(f_info); destination(mailinfo); }; write for destination(mailinfo) the messages where " filter(f_mail) AND filter(f_info) " is true or " filter(f_mail) OR filter(f_info) " is true ? Because in my syslog-ng.conf I have : destination mailinfo { file("/var/log/syslog-ng/gandalf/mail.info"); }; destination mailwarn { file("/var/log/syslog-ng/gandalf/mail.warn"); }; filter f_mail { facility(mail); }; filter f_info { level(info); }; filter f_warn { level(warn); }; log { source(src); filter(f_mail); filter(f_info); destination(mailinfo); }; log { source(src); filter(f_mail); filter(f_warn); destination(mailwarn); }; and my logs "mailinfo" and "mailwarn" are same . Kleyson Rios. Brazil.

2 1

syslog-ng 1.4.7 and libol 0.2.20
by Balazs Scheidler 29 Sep '00

29 Sep '00

Hi, I've released syslog-ng 1.4.7 and libol 0.2.20, which you can find at the usual places. This release fixes a quite serious memory leak bug. Scott, please check if this one fixes your problems. -- Bazsi PGP info: KeyID 9AF8D0A9 Fingerprint CD27 CFB0 802C 0944 9CFD 804E C82C 8EB1 url: http://www.balabit.hu/pgpkey.txt

1 0

RE: [syslog-ng]SQL support with syslog
by Hamilton, Andrew Mr. 26 Sep '00

26 Sep '00

The easiest thing to do is to send the log output to scripts. Then you can parse and feed it to whatever application you want, however you want. Drew > -----Original Message----- > From: offset [SMTP:offset@privacyx.com] > Sent: Monday, September 25, 2000 9:46 PM > To: syslog-ng(a)lists.balabit.hu > Subject: [syslog-ng]SQL support with syslog > > I am trying to come up with a centralized syslog solution and I wanted > to hear from other people that have a centralized solution in place. > > I was thinking about using syslog-ng running on the collection server > but I'm not sure how to go about doing the real-time alerting and > long-term storage for possible forensics use. > > I've heard good things about logsurfer, so I was going to explore using > this tool http://www.cert.dfn.de/eng/logsurf/ > > How do I go about gathering syslog data directly into a SQL database in > real-time (or near real-time) such as Postgresql, or mysql? > > Thanks, > > _______________________________________________ > syslog-ng maillist - syslog-ng(a)lists.balabit.hu > https://lists.balabit.hu/mailman/listinfo/syslog-ng

1 0

SQL support with syslog
by offset 25 Sep '00

25 Sep '00

I am trying to come up with a centralized syslog solution and I wanted to hear from other people that have a centralized solution in place. I was thinking about using syslog-ng running on the collection server but I'm not sure how to go about doing the real-time alerting and long-term storage for possible forensics use. I've heard good things about logsurfer, so I was going to explore using this tool http://www.cert.dfn.de/eng/logsurf/ How do I go about gathering syslog data directly into a SQL database in real-time (or near real-time) such as Postgresql, or mysql? Thanks,

1 0

RE: [syslog-ng]Simple question.
by Shawn Davenport 25 Sep '00

25 Sep '00

Larry, give this a try... destination all { udp("192.168.0.24" port(514)); }; hope that helps. thanks... shawn -----Original Message----- From: Cashdollar, Larry [mailto:larry.cashdollar@akamai.com] Sent: Monday, September 25, 2000 11:01 AM To: 'syslog-ng(a)lists.balabit.hu' Subject: [syslog-ng]Simple question. I have setup an OpenBSD logging host. I am installing syslog-ng on all my solaris boxes. I am having a little trouble getting syslog-ng to log to a remote host. From the man page/documentation I came up with destination all {udp ("192.168.0.24","514");}; This returns a syntax error. Any help would be appreciated. _______________________________________________ syslog-ng maillist - syslog-ng(a)lists.balabit.hu https://lists.balabit.hu/mailman/listinfo/syslog-ng

1 0

Simple question.
by Cashdollar, Larry 25 Sep '00

25 Sep '00

I have setup an OpenBSD logging host. I am installing syslog-ng on all my solaris boxes. I am having a little trouble getting syslog-ng to log to a remote host. From the man page/documentation I came up with destination all {udp ("192.168.0.24","514");}; This returns a syntax error. Any help would be appreciated.

1 0

Syslog-ng in Solaris
by Kleyson Rios 25 Sep '00

25 Sep '00

Hi, I can run syslog-ng in Solaris Intel ?? Thank You .

2 1

Re: [syslog-ng]chain_hostname(yes) complicates use of $HOST
by John A. Parker 25 Sep '00

25 Sep '00

In order to get around the problem I mentioned earlier with messages being logged to the $HOST (s) "Message" and "last", I altered the sources.c file do_add_source_name subroutine lines from: if (logmsg->host) logmsg->host = c_format("%fS/%fS", logmsg->host, name); to: if (logmsg->host) logmsg->host = c_format("%fS/%fS", name, logmsg->host); After making this change (swapping name and logmsg->host arguments), messages that used to look like: Sep 20 02:08:22 Message/aaaa.bbbb.cornell.edu forwarded from aaaa: sshd[40128]: log: ... Now appear as: Sep 20 02:08:22 aaaa.bbbb.cornell.edu/Message forwarded from aaaa: sshd[40128]: log: ... (To be honest, I think the second format looks better anyway.) I actually changed (simplified) the entire do_add_source_name subroutine chain_hostnames block in accordance with our needs. I'm including below the patch I generated to show how that code now looks. *** sources.c Tue Aug 22 04:44:55 2000 --- sources.c.new Wed Sep 20 06:25:53 2000 *************** *** 198,223 **** name = get_source_hostname(logmsg->saddr, self->use_dns, self->use_fqdn); if (self->chain_hostnames) { ! if (logmsg->flags & LF_LOCAL) { ! /* local */ ! ol_string_free(logmsg->host); ! logmsg->host = c_format("%S@%fS", ! self->name, name); ! } ! else if (!logmsg->host) { ! /* remote && no hostname */ ! logmsg->host = c_format("%S/%fS", name, name); ! } ! else { ! /* everything else, append source hostname */ ! if (logmsg->host) ! logmsg->host = ! c_format("%fS/%fS", ! logmsg->host, name); ! else ! logmsg->host = ! c_format("%fS", name); ! } } else { ol_string_free(logmsg->host); --- 198,208 ---- name = get_source_hostname(logmsg->saddr, self->use_dns, self->use_fqdn); if (self->chain_hostnames) { ! if (logmsg->host) ! logmsg->host = c_format("%fS/%fS", ! name, logmsg->host); ! else ! logmsg->host = c_format("%fS", name); } else { ol_string_free(logmsg->host); --- John A. Parker Senior Programmer/Analyst - AIX Cornell University jap54(a)cornell.edu 607-255-9356 607-255-8521 (Fax)

3 4

RE: [syslog-ng][daan@sambal.hobby.nl: syslog-ng on rm/sinix-y]
by Looy.Gert-Jan 25 Sep '00

25 Sep '00

This is what I get on sinix (ReliantUnix v5.43c40) : (and on any version of syslog-ng I've tried) io.c: bind_inet_socket() bind failed 0.0.0.0:9876 Socket operation on non-socket Error initializing configuration, exiting. Where is that libxnet and could it have anything to do with this? The port choosen is definitely not in use by any other program.. Thanks! -----Original Message----- From: Balazs Scheidler [mailto:bazsi@balabit.hu] Sent: maandag 25 september 2000 10:55 To: syslog-ng(a)lists.balabit.hu Subject: [syslog-ng][daan(a)sambal.hobby.nl: syslog-ng on rm/sinix-y] For those trying to run syslog-ng on sinix. As it seems removing the the library libxnet from the makefile fixes network related problems on sinix. ----- Forwarded message from daan <daan(a)sambal.hobby.nl> ----- Date: Sun, 24 Sep 2000 21:39:03 +0200 (MEST) From: daan <daan(a)sambal.hobby.nl> To: Balazs Scheidler <bazsi(a)balabit.hu> Subject: syslog-ng on rm/sinix-y -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 I should have reported this back a week ago, sorry. The problem was libxnet. I removed it from the Makefile after running configure in both libol and syslog-ng. It now runs as perfect as could be (to me). I didn't compile in the unix-streams i think, because /dev/log seems quiet. (It is not a sun-stream is it?). Thank you for a great package. :wq! Daan Hoogland v v dhoogland(a)snow.nl OO developers / ### ## ## # >---X---< http://snow.nl # # # # # # # # / Snow B.V. ## # # # # # # # ^ ^ Tel. (+31)418-653333 # # # # # # # # Fax. (+31)418-653666 ### # # ## ## ## -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.0.1 (GNU/Linux) Comment: For info see http://www.gnupg.org Filter: gpg4pine 4.0 (http://azzie.robotics.net) iD8DBQE5zlhZ8i4+cJqeNIwRAl03AJ9QntcWIK6Y1QLAjsR9thgaIPO+8ACdEIBw 4ZqXSflktFIMsS3918oCY0E= =ukV5 -----END PGP SIGNATURE----- ----- End forwarded message ----- -- Bazsi PGP info: KeyID 9AF8D0A9 Fingerprint CD27 CFB0 802C 0944 9CFD 804E C82C 8EB1 url: http://www.balabit.hu/pgpkey.txt _______________________________________________ syslog-ng maillist - syslog-ng(a)lists.balabit.hu https://lists.balabit.hu/mailman/listinfo/syslog-ng

1 0

[daan@sambal.hobby.nl: syslog-ng on rm/sinix-y]
by Balazs Scheidler 25 Sep '00

25 Sep '00

For those trying to run syslog-ng on sinix. As it seems removing the the library libxnet from the makefile fixes network related problems on sinix. ----- Forwarded message from daan <daan(a)sambal.hobby.nl> ----- Date: Sun, 24 Sep 2000 21:39:03 +0200 (MEST) From: daan <daan(a)sambal.hobby.nl> To: Balazs Scheidler <bazsi(a)balabit.hu> Subject: syslog-ng on rm/sinix-y -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 I should have reported this back a week ago, sorry. The problem was libxnet. I removed it from the Makefile after running configure in both libol and syslog-ng. It now runs as perfect as could be (to me). I didn't compile in the unix-streams i think, because /dev/log seems quiet. (It is not a sun-stream is it?). Thank you for a great package. :wq! Daan Hoogland v v dhoogland(a)snow.nl OO developers / ### ## ## # >---X---< http://snow.nl # # # # # # # # / Snow B.V. ## # # # # # # # ^ ^ Tel. (+31)418-653333 # # # # # # # # Fax. (+31)418-653666 ### # # ## ## ## -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.0.1 (GNU/Linux) Comment: For info see http://www.gnupg.org Filter: gpg4pine 4.0 (http://azzie.robotics.net) iD8DBQE5zlhZ8i4+cJqeNIwRAl03AJ9QntcWIK6Y1QLAjsR9thgaIPO+8ACdEIBw 4ZqXSflktFIMsS3918oCY0E= =ukV5 -----END PGP SIGNATURE----- ----- End forwarded message ----- -- Bazsi PGP info: KeyID 9AF8D0A9 Fingerprint CD27 CFB0 802C 0944 9CFD 804E C82C 8EB1 url: http://www.balabit.hu/pgpkey.txt

1 0

Syslog-ng , Syslog and routers
by Kleyson Rios 20 Sep '00

20 Sep '00

Hello, I can send messages remotely of the syslog and routers for the syslog-ng ? Kleyson Rios. Brazil.

2 1