- syslog-ng - lists.balabit.hu

Cannot find init.d.AIX in contrib folder
by Chanchal Verma 23 Jan '09

23 Jan '09

Hi, I am building syslog-ng-2.1.3 on AIX 5.1. I compiled it successfully and tool is working fine. I am in process to automate the start script. I cannot find init.d.AIX script in <..>/syslog-ng-2.1.3/contrib folder. It is available for other OS (solaris, SunOS,HP-UX,RedHat..). The startup script which I have created is not 100% compliance with the AIX OS. Like syslog-ng is running on server and it is still showing status 'inoperative' as Subsystem status. I need startup script for AIX OS. Any help will be highly appreciated. With Regards, Chanchal Verma

3 5

Fixed number fd-limit doesn't scale
by Corinna Vinschen 23 Jan '09

23 Jan '09

Hi, in 3.0.1, in src/gprocess.c, line 112, the fd_limit_min is set to the fixed value 4096. This doesn't work well on systems which have a hard limit smaller than 4K. While there's a command line option --fd-limit (but unfortunately no equivalent config file option), the default on those systems is to get an error message at startup: syslog-ng: Error setting file number limit; limit='4096'; error='Too many open files' Wouldn't it be better to choose a system specifc default like OPEN_MAX instead or better, to call sysconf(_SC_OPEN_MAX) to fetch the system default and only use 4096 as fallback if none of the two is available or the values are larger than 4K? Corinna -- Corinna Vinschen Cygwin Project Co-Leader Red Hat

2 9

New files for contrib/cygwin-packaging
by Corinna Vinschen 23 Jan '09

23 Jan '09

Hi, so far I didn't upgrade Cygwin's syslog-ng beyond 2.1.x. The changes in 3.0 require to change the Cygwin specific files in the contrib directory. Both files are attached. Could these both please applied to the syslog-ng repository? Thanks in advance, Corinna -- Corinna Vinschen Cygwin Project Co-Leader Red Hat

2 3

Writing to a named Pipe
by Pedro Rafael Alves Simoes 22 Jan '09

22 Jan '09

Hello, In my syslog-ng configuration I'm writing messages to named pipes which name is given dynamically by the $PRI macro: destination d_test { pipe("/tmp/$PRI.log"); }; All the possible PRI.log pipes were created previously with mkfifo. With this configuration the messages aren't being written to the pipes. It simply does nothing. Doing a strace on the syslog-ng process, it shows an error : open("/tmp/$PRI.log", O_RDWR|O_NONBLOCK|O_NOCTTY|O_LARGEFILE) = -1 ENOENT (No such file or directory) It seems that the PRI macro isn't being interpolated in the string. Any help?

2 1

[Bug 27] New: 3.0.1: syntax check (-s) overwrites syslog-ng.pid
by bugzilla＠bugzilla.balabit.com 20 Jan '09

20 Jan '09

https://bugzilla.balabit.com/show_bug.cgi?id=27 Summary: 3.0.1: syntax check (-s) overwrites syslog-ng.pid Product: syslog-ng Version: unspecified Platform: PC OS/Version: Linux Status: NEW Severity: normal Priority: unspecified Component: syslog-ng AssignedTo: bazsi(a)balabit.hu ReportedBy: arekm(a)maven.pl Type of the Report: --- Estimated Hours: 0.0 syslog-ng -s overwrites syslog-ng.pid which makes no sense because we loose information about pid of running syslog-ng daemon. Then "stop" action in many init scripts is not able to find out pid of original syslog-ng this making "stop" no longer working. ps. version form in bugzilla missess 3.x.x versions -- Configure bugmail: https://bugzilla.balabit.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are watching all bug changes.

1 1

YACC Stack Overflow
by Cauchi, Geoffrey, VF-MT 19 Jan '09

19 Jan '09

Hi I am using syslog version 2.0.8 and all is running well. I am using it to log a number of Cisco devices. Recently I tried to add an additional number of devices that I would like to have their syslog sent to the Syslog-NG server. This is the syntax used in the config file: destination CAT1 { file("/var/log/switches/CAT1/log.txt" dir_perm(0755) perm(0755));}; filter f_filter73 { netmask(192.168.150.25);}; log { source(s_udp); filter(f_filter73); destination(CAT1); }; However, when I restart syslog-ng I get the following error: Stopping syslog-ng: [OK] Starting syslog-ng: yacc stack overflow at 314 YACC is complaining of a stack overflow. Syslog-ng is running on Fedora Core 8. Did anyone encounter this problem before? Any help would be appreciated. Thanks Gef ------------------------------------------------------------------------------------- Vodafone Life is Now ------------------------------------------------------------------------------------- This email is intended only for the use of individuals to whom it is addressed, as it may contain confidential or privileged information. If you are not a named addressee, intended recipient, or the person responsible for delivering the message to the named addressee, be advised that you have received this email in error and that you should not disseminate, distribute, print, copy this mail or otherwise divulge its contents. In such instances, please notify Vodafone Malta Limited on telephone number +356 99999247 and delete this email from your system. Since this transmission was affected via email, Vodafone Malta Limited cannot guarantee that it is secure or error-free as information could be intercepted, corrupted, lost, destroyed, arrive late or incomplete, or contain viruses. Vodafone Malta Limited does not accept liability for any errors or omissions in the contents of this message which arise as a result of email transmission. Save the environment for our children - Print e-mail only when necessary.

2 7

syslog-ng-2.1.3: 'Configure' failed on Solaris 8 using --enable-static-linking
by Chanchal Verma 19 Jan '09

19 Jan '09

Hi, I have successfully build syslog-ng-2.1.3 with --enable-dynamic-linking on Solaris 8. While trying to build using --enable-static-linking option, it is not allowing me to configure syslog-ng-2.1.3 version on my Solaris 8 box (sparc). It is not able to find glib-2.0.a (Static library), though it is available in /usr/local/lib path. -rw-r--r-- 1 root 2822036 Jan 15 06:21 /usr/local/lib/libglib-2.0.a Here is error message while doing compilation: ----------------------------------------------------------------------------------------------------------------------------------------------------------------------- ./configure --enable-static-linking --prefix=/opt/syslog-ng-2.1.3 .... .... checking whether to enable TCP wrapper support... no checking whether to enable spoof source support... no checking whether to enable IPv6 support... yes checking whether to enable SQL support... no checking for pkg-config... (cached) /usr/local/bin/pkg-config checking pkg-config is at least version 0.14... yes checking for GLIB - version >= 2.4.0... yes (version 2.13.0) checking for static GLib libraries... no checking sanity checking Glib headers... yes configure: error: static GLib libraries not found (a file named libglib-2.0.a), either link GLib dynamically using the --enable-dynamic-linking or install a static GLib ----------------------------------------------------------------------------------------------------------------------------------------------------------------------- I have compiled glib-2.13.1 witn --enable-static option to get libglib-2.0.a library using gcc-3.4.6 compiler (same I am using for syslog-ng). Somehow syslog-ng is not able to find Static Glib during configure. Any help will be highly appreciated. Thanks, Chanchal Verma

4 9

Drops?
by Mike Rykowski 16 Jan '09

16 Jan '09

I configured syslog-ng to pass messages to SEC via named pipes. When I did I saw in the log statistics: Jan 13 09:10:00 syslog-ng[13736]: Log statistics; dropped='pipe(sec- pipe)=1607', dropped='unix-dgram(AF_UNIX(/dev/log))=0', processed='center(queued)=1794661', processed='center (received)=1718990', I then called SEC using the 'program' option instead of named pipes and I got: Jan 13 10:14:13 syslog-ng[14031]: Log statistics; dropped='program (/usr/local/bin/sec.pl -input="-" -conf=/usr/local/etc/my-sec.conf)=0', dropped='unix-dgram(AF_UNIX(/dev/log))=0', processed='center (queued)=2552863', processed='center(received)=2447130', The drops were zero but the queued and received were not equal. Does this mean messages are getting dropped? When I don't call SEC at all I get queued and received to be equal: Jan 14 09:26:44 syslog-ng[14119]: Log statistics; dropped='unix-dgram (AF_UNIX(/dev/log))=0', processed='center(queued)=70516726', processed='center(received)=70516726', -- Mike Rykowski NU-IT Telecommunications and Network Services

2 1

[Bug 26] New: 3.0.1: syslog facility is not recognized
by bugzilla＠bugzilla.balabit.com 16 Jan '09

16 Jan '09

https://bugzilla.balabit.com/show_bug.cgi?id=26 Summary: 3.0.1: syslog facility is not recognized Product: syslog-ng Version: unspecified Platform: PC OS/Version: Linux Status: NEW Severity: normal Priority: unspecified Component: syslog-ng AssignedTo: bazsi(a)balabit.hu ReportedBy: arekm(a)maven.pl Type of the Report: regression Estimated Hours: 0.0 Config contains: filter f_systlog { facility(syslog); }; and syslog-ng 3.0.1 yells: syntax error in /etc/syslog-ng/syslog-ng.conf at line 75. Replacing "facility(syslog)" with "facility(news)" and problem is gone which suggests problems with parsing "syslog" correctly. -- Configure bugmail: https://bugzilla.balabit.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are watching all bug changes.

1 1

syslog-ng MIB table
by Riza Kamalie 16 Jan '09

16 Jan '09

Hi, Does syslog-ng have a MIB that can be quered using snmp? Regards Riza

2 1