- syslog-ng - lists.balabit.hu

destination socket solaris 10 binding failure
by chris cobucci 03 Dec '07

03 Dec '07

Dear users: my first post, so please let me know if I commit some fo-paw. can you let me know if I am mis-configuring something here -- it's my first attempt at using destination sockets: system: sun solaris 10 (sparc) software: syslog-ng.2.0.5 syslog-ng.2.0.6 (no extra-ordinary compile options) /usr/local/etc/syslog-ng.conf (pertinent lines only) destination poe { unix-dgram("/tmp/poeunixsocket"); }; log { source(s_sys); destination(poe); }; socket file is srwxr-xr-w root root 0 poeunixsocket I figured with no listener, ng would just buffer. starting ng (as root) I get: Error binding socket; addr='AF_UNIX(anonymous)', error='Is a directory (21)' Initiating connection failed, reconnecting; time_reopen='10' I've tried unix-stream as well to no avail. Any assistance would be greatly appreciated. Thanks, Chris _________________________________________________________________ Your smile counts. The more smiles you share, the more we donate. Join in. www.windowslive.com/smile?ocid=TXT_TAGLM_Wave2_oprsmilewlhmtagline

2 4

Re: [syslog-ng] File source and flow-control question
by Behal, Pavel 03 Dec '07

03 Dec '07

Dear Bazsi, Attached you can find my configuration file, I used for extensive testing. I have used it as file-incremental transfer agent. Please, ignore Czech comments. Best Regards, Pavel -----Original Message----- Date: Sat, 01 Dec 2007 15:42:19 +0100 From: Balazs Scheidler <bazsi(a)balabit.hu> Subject: Re: [syslog-ng] File source and flow-control question To: Syslog-ng users' and developers' mailing list <syslog-ng(a)lists.balabit.hu> Message-ID: <1196520139.6678.0.camel(a)bzorp.balabit> Content-Type: text/plain On Fri, 2007-11-30 at 06:44 +0000, Behal, Pavel wrote: > Dear List Members, > > I have found syslog-ng really valuable part of operating system, > thanks to all. I would like to ask a flow-control related question: > > I have tried to use it (2.0.5) also as a collector of events from some > log text-files using the file source with follow-freq set. > It is working fine. But I have realized, that in case of network > problem, the syslog-ng process never stops reading the data. > (Yes, this is normal.) It continuously follows the incremented data > and everything above volume the of internal line buffer get lost. I > hoped, this can be changed using the flow-control flag, but I think > the flow-control flag does not affect the file source and it never > blocks reading. > > Is there any way, how to setup the syslog-ng to stop reading the > followed source file when destination is unavailable and continue from > last event send after reconnect? Thank you. > Hmm.. if flow-control is enabled, syslog-ng should stop reading data from all sources that feed data into the flow-controlled path. Can you post your configuration file? -- Bazsi

2 1

File source and flow-control question
by Behal, Pavel 01 Dec '07

01 Dec '07

Dear List Members, I have found syslog-ng really valuable part of operating system, thanks to all. I would like to ask a flow-control related question: I have tried to use it (2.0.5) also as a collector of events from some log text-files using the file source with follow-freq set. It is working fine. But I have realized, that in case of network problem, the syslog-ng process never stops reading the data. (Yes, this is normal.) It continuously follows the incremented data and everything above volume the of internal line buffer get lost. I hoped, this can be changed using the flow-control flag, but I think the flow-control flag does not affect the file source and it never blocks reading. Is there any way, how to setup the syslog-ng to stop reading the followed source file when destination is unavailable and continue from last event send after reconnect? Thank you. Best Regards, Pavel

2 1

Re: [syslog-ng] Redirect syslog-ng to ttyS0
by kjell.danielsen＠hjemme.no 29 Nov '07

29 Nov '07

Hei. I have included the strace log ( when I log in n ttyS0). Can anyone help me analyzing it. Kjell execve("/sbin/syslog-ng", ["syslog-ng"], [/* 69 vars */]) = 0 brk(0) = 0x80021000 mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb7f79000 access("/etc/ld.so.preload", R_OK) = -1 ENOENT (No such file or directory) open("/etc/ld.so.cache", O_RDONLY) = 3 fstat64(3, {st_mode=S_IFREG|0644, st_size=82152, ...}) = 0 mmap2(NULL, 82152, PROT_READ, MAP_PRIVATE, 3, 0) = 0xb7f64000 close(3) = 0 open("/lib/libnsl.so.1", O_RDONLY) = 3 read(3, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0\3\0\1\0\0\0`5\0\000"..., 512) = 512 fstat64(3, {st_mode=S_IFREG|0755, st_size=87850, ...}) = 0 mmap2(NULL, 83712, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0xb7f4f000 madvise(0xb7f4f000, 83712, MADV_SEQUENTIAL|0x1) = 0 mmap2(0xb7f60000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x10) = 0xb7f60000 mmap2(0xb7f62000, 5888, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0xb7f62000 close(3) = 0 open("/lib/libresolv.so.2", O_RDONLY) = 3 read(3, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0\3\0\1\0\0\0P&\0\000"..., 512) = 512 fstat64(3, {st_mode=S_IFREG|0755, st_size=74278, ...}) = 0 mmap2(NULL, 76052, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0xb7f3c000 madvise(0xb7f3c000, 76052, MADV_SEQUENTIAL|0x1) = 0 mmap2(0xb7f4b000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0xe) = 0xb7f4b000 mmap2(0xb7f4d000, 6420, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0xb7f4d000 close(3) = 0 open("/lib/libc.so.6", O_RDONLY) = 3 read(3, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0\3\0\1\0\0\0\300Y\1"..., 512) = 512 fstat64(3, {st_mode=S_IFREG|0755, st_size=1408371, ...}) = 0 mmap2(NULL, 1181084, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0xb7e1b000 madvise(0xb7e1b000, 1181084, MADV_SEQUENTIAL|0x1) = 0 mmap2(0xb7f35000, 16384, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x119) = 0xb7f35000 mmap2(0xb7f39000, 9628, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0xb7f39000 close(3) = 0 mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb7e1a000 set_thread_area({entry_number:-1 -> 6, base_addr:0xb7e1a8c0, limit:1048575, seg_32bit:1, contents:0, read_exec_only:0, limit_in_pages:1, seg_not_present:0, useable:1}) = 0 mprotect(0xb7f35000, 8192, PROT_READ) = 0 munmap(0xb7f64000, 82152) = 0 brk(0) = 0x80021000 brk(0x80042000) = 0x80042000 open("/etc/localtime", O_RDONLY) = 3 fstat64(3, {st_mode=S_IFREG|0644, st_size=56, ...}) = 0 fstat64(3, {st_mode=S_IFREG|0644, st_size=56, ...}) = 0 mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb7f78000 read(3, "TZif\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\1\0\0\0\1\0"..., 4096) = 56 close(3) = 0 munmap(0xb7f78000, 4096) = 0 open("/etc/syslog-ng/syslog-ng.conf", O_RDONLY) = 3 ioctl(3, SNDCTL_TMR_TIMEBASE or TCGETS, 0xbfec3f78) = -1 ENOTTY (Inappropriate ioctl for device) fstat64(3, {st_mode=S_IFREG|0644, st_size=5785, ...}) = 0 mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb7f78000 read(3, "#\n# /etc/syslog-ng/syslog-ng.con"..., 8192) = 5785 read(3, "", 4096) = 0 socket(PF_FILE, SOCK_STREAM, 0) = 4 fcntl64(4, F_GETFL) = 0x2 (flags O_RDWR) fcntl64(4, F_SETFL, O_RDWR|O_NONBLOCK) = 0 connect(4, {sa_family=AF_FILE, path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory) close(4) = 0 socket(PF_FILE, SOCK_STREAM, 0) = 4 fcntl64(4, F_GETFL) = 0x2 (flags O_RDWR) fcntl64(4, F_SETFL, O_RDWR|O_NONBLOCK) = 0 connect(4, {sa_family=AF_FILE, path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory) close(4) = 0 open("/etc/nsswitch.conf", O_RDONLY) = 4 fstat64(4, {st_mode=S_IFREG|0644, st_size=1185, ...}) = 0 mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb7f77000 read(4, "#\n# /etc/nsswitch.conf\n#\n# An ex"..., 4096) = 1185 read(4, "", 4096) = 0 close(4) = 0 munmap(0xb7f77000, 4096) = 0 open("/etc/ld.so.cache", O_RDONLY) = 4 fstat64(4, {st_mode=S_IFREG|0644, st_size=82152, ...}) = 0 mmap2(NULL, 82152, PROT_READ, MAP_PRIVATE, 4, 0) = 0xb7e05000 close(4) = 0 open("/lib/libnss_compat.so.2", O_RDONLY) = 4 read(4, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0\3\0\1\0\0\0@\21\0\000"..., 512) = 512 fstat64(4, {st_mode=S_IFREG|0755, st_size=31943, ...}) = 0 mmap2(NULL, 29296, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 4, 0) = 0xb7f70000 madvise(0xb7f70000, 29296, MADV_SEQUENTIAL|0x1) = 0 mmap2(0xb7f76000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 4, 0x5) = 0xb7f76000 close(4) = 0 munmap(0xb7e05000, 82152) = 0 open("/etc/ld.so.cache", O_RDONLY) = 4 fstat64(4, {st_mode=S_IFREG|0644, st_size=82152, ...}) = 0 mmap2(NULL, 82152, PROT_READ, MAP_PRIVATE, 4, 0) = 0xb7e05000 close(4) = 0 open("/lib/libnss_nis.so.2", O_RDONLY) = 4 read(4, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0\3\0\1\0\0\0\260\34"..., 512) = 512 fstat64(4, {st_mode=S_IFREG|0755, st_size=41986, ...}) = 0 mmap2(NULL, 37424, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 4, 0) = 0xb7f66000 madvise(0xb7f66000, 37424, MADV_SEQUENTIAL|0x1) = 0 mmap2(0xb7f6e000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 4, 0x7) = 0xb7f6e000 close(4) = 0 open("/lib/libnss_files.so.2", O_RDONLY) = 4 read(4, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0\3\0\1\0\0\0\360\33"..., 512) = 512 fstat64(4, {st_mode=S_IFREG|0755, st_size=42109, ...}) = 0 mmap2(NULL, 37528, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 4, 0) = 0xb7dfb000 madvise(0xb7dfb000, 37528, MADV_SEQUENTIAL|0x1) = 0 mmap2(0xb7e03000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 4, 0x7) = 0xb7e03000 close(4) = 0 munmap(0xb7e05000, 82152) = 0 open("/etc/group", O_RDONLY) = 4 fcntl64(4, F_GETFD) = 0 fcntl64(4, F_SETFD, FD_CLOEXEC) = 0 _llseek(4, 0, [0], SEEK_CUR) = 0 fstat64(4, {st_mode=S_IFREG|0644, st_size=831, ...}) = 0 mmap2(NULL, 831, PROT_READ, MAP_SHARED, 4, 0) = 0xb7e19000 _llseek(4, 831, [831], SEEK_SET) = 0 munmap(0xb7e19000, 831) = 0 close(4) = 0 open("/etc/group", O_RDONLY) = 4 fcntl64(4, F_GETFD) = 0 fcntl64(4, F_SETFD, FD_CLOEXEC) = 0 _llseek(4, 0, [0], SEEK_CUR) = 0 fstat64(4, {st_mode=S_IFREG|0644, st_size=831, ...}) = 0 mmap2(NULL, 831, PROT_READ, MAP_SHARED, 4, 0) = 0xb7e19000 _llseek(4, 831, [831], SEEK_SET) = 0 munmap(0xb7e19000, 831) = 0 close(4) = 0 socket(PF_FILE, SOCK_STREAM, 0) = 4 fcntl64(4, F_GETFL) = 0x2 (flags O_RDWR) fcntl64(4, F_SETFL, O_RDWR|O_NONBLOCK) = 0 connect(4, {sa_family=AF_FILE, path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory) close(4) = 0 socket(PF_FILE, SOCK_STREAM, 0) = 4 fcntl64(4, F_GETFL) = 0x2 (flags O_RDWR) fcntl64(4, F_SETFL, O_RDWR|O_NONBLOCK) = 0 connect(4, {sa_family=AF_FILE, path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory) close(4) = 0 open("/etc/passwd", O_RDONLY) = 4 fcntl64(4, F_GETFD) = 0 fcntl64(4, F_SETFD, FD_CLOEXEC) = 0 _llseek(4, 0, [0], SEEK_CUR) = 0 fstat64(4, {st_mode=S_IFREG|0644, st_size=1654, ...}) = 0 mmap2(NULL, 1654, PROT_READ, MAP_SHARED, 4, 0) = 0xb7e19000 _llseek(4, 1654, [1654], SEEK_SET) = 0 munmap(0xb7e19000, 1654) = 0 close(4) = 0 open("/etc/group", O_RDONLY) = 4 fcntl64(4, F_GETFD) = 0 fcntl64(4, F_SETFD, FD_CLOEXEC) = 0 _llseek(4, 0, [0], SEEK_CUR) = 0 fstat64(4, {st_mode=S_IFREG|0644, st_size=831, ...}) = 0 mmap2(NULL, 831, PROT_READ, MAP_SHARED, 4, 0) = 0xb7e19000 _llseek(4, 831, [831], SEEK_SET) = 0 munmap(0xb7e19000, 831) = 0 close(4) = 0 open("/etc/passwd", O_RDONLY) = 4 fcntl64(4, F_GETFD) = 0 fcntl64(4, F_SETFD, FD_CLOEXEC) = 0 _llseek(4, 0, [0], SEEK_CUR) = 0 fstat64(4, {st_mode=S_IFREG|0644, st_size=1654, ...}) = 0 mmap2(NULL, 1654, PROT_READ, MAP_SHARED, 4, 0) = 0xb7e19000 _llseek(4, 1654, [1654], SEEK_SET) = 0 munmap(0xb7e19000, 1654) = 0 close(4) = 0 open("/etc/group", O_RDONLY) = 4 fcntl64(4, F_GETFD) = 0 fcntl64(4, F_SETFD, FD_CLOEXEC) = 0 _llseek(4, 0, [0], SEEK_CUR) = 0 fstat64(4, {st_mode=S_IFREG|0644, st_size=831, ...}) = 0 mmap2(NULL, 831, PROT_READ, MAP_SHARED, 4, 0) = 0xb7e19000 _llseek(4, 831, [831], SEEK_SET) = 0 munmap(0xb7e19000, 831) = 0 close(4) = 0 open("/etc/passwd", O_RDONLY) = 4 fcntl64(4, F_GETFD) = 0 fcntl64(4, F_SETFD, FD_CLOEXEC) = 0 _llseek(4, 0, [0], SEEK_CUR) = 0 fstat64(4, {st_mode=S_IFREG|0644, st_size=1654, ...}) = 0 mmap2(NULL, 1654, PROT_READ, MAP_SHARED, 4, 0) = 0xb7e19000 _llseek(4, 1654, [1654], SEEK_SET) = 0 munmap(0xb7e19000, 1654) = 0 close(4) = 0 open("/etc/group", O_RDONLY) = 4 fcntl64(4, F_GETFD) = 0 fcntl64(4, F_SETFD, FD_CLOEXEC) = 0 _llseek(4, 0, [0], SEEK_CUR) = 0 fstat64(4, {st_mode=S_IFREG|0644, st_size=831, ...}) = 0 mmap2(NULL, 831, PROT_READ, MAP_SHARED, 4, 0) = 0xb7e19000 _llseek(4, 831, [831], SEEK_SET) = 0 munmap(0xb7e19000, 831) = 0 close(4) = 0 read(3, "", 8192) = 0 ioctl(3, SNDCTL_TMR_TIMEBASE or TCGETS, 0xbfec39f8) = -1 ENOTTY (Inappropriate ioctl for device) close(3) = 0 munmap(0xb7f78000, 4096) = 0 pipe([3, 4]) = 0 clone(child_stack=0, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0xb7e1a908) = 5189 close(4) = 0 read(3, "\0", 1) = 1 exit_group(0) = ?

5 8

Freshmeat page
by Andrej Ricnik-Bay 28 Nov '07

28 Nov '07

Hi, While the announcement on freshmeat says 2.06 the little download icon still points at 2.05. Cheers, Andrej -- Please don't top post, and don't use HTML e-Mail :} Make your quotes concise. http://www.american.edu/econ/notes/htmlmail.htm

3 3

Re: [syslog-ng] syslog-ng 2.0.6 has been released
by G.W. Haywood 28 Nov '07

28 Nov '07

Hi there, On Wed, 28 Nov 2007 BalaBit Development Team wrote: > ------------------------------------------------------------------------------ > PACKAGE : syslog-ng > VERSION : 2.0.6 > SUMMARY : new stable release > DATE : Nov 28, 2007 > ------------------------------------------------------------------------------ > > ... > > SOURCE DOWNLOAD: > > The latest versions of syslog-ng in source format can be found at: > > http://www.balabit.com/downloads/files/syslog-ng/sources/2.0/src/ I don't see 2.0.6 there. -- 73, Ged.

1 0

Has Anyone Gotten Syslog-NG Running as Non-Root Working?
by Mathew Brown 28 Nov '07

28 Nov '07

Hi, I'm currently trying to get syslog-ng running as a non-privileged user. What I've done so far is as follows: * create a sysng user and group * stopped syslog from running * modified /etc/sysconfig/syslog-ng and set SYSLOGNG_OPTIONS to SYSLOGNG_OPTIONS="-p /var/run/syslogd.pid -u sysng -g sysng" * Added the following to my config file: owner(sysng); group(sysng); perm(0600); # default owner, group, and permissions for created directories # (defaults are 0, 0, 0700) dir_owner(sysng); dir_group(sysng); dir_perm(0700); * Fixed permissions under /var/log as follows: chgrp -R sysng /var/log chmod -R g+wx /var/log * However, my primary problem is reading from /proc/kmsg. It seems that when syslog-ng initially starts, it can open /proc/kmsg before it drops privileges to sysng. Strace shows that it did: 17692 open("/proc/kmsg", O_RDONLY|O_NOCTTY|O_NONBLOCK|O_LARGEFILE) = 3 However, I then find the following in my /var/log/messages file: Nov 28 10:42:37 localhost syslog-ng[18356]: I/O error occurred while reading; fd='3', error='Operation not permitted (1)' So it looks like it can't read from /proc/kmsg. Has anyone gotten this working? I found several related emails but without a resolution to this issue including: * https://lists.balabit.hu/pipermail/syslog-ng/2007-January/009684.html * https://lists.balabit.hu/pipermail/syslog-ng/2007-October/010804.html One possible solution that I'm currently thinking of is to use klogd instead of reading from /proc/kmsg. Any input? Thanks for your help. -- Mathew Brown mathewbrown(a)fastmail.fm -- http://www.fastmail.fm - One of many happy users: http://www.fastmail.fm/docs/quotes.html

1 0

[syslog-ng-announce] syslog-ng 2.0.6 has been released
by BalaBit Development Team 28 Nov '07

28 Nov '07

------------------------------------------------------------------------------ PACKAGE : syslog-ng VERSION : 2.0.6 SUMMARY : new stable release DATE : Nov 28, 2007 ------------------------------------------------------------------------------ DESCRIPTION: A new stable version of syslog-ng Open Source Edition (2.0.6) has been released. For latest fixes in the 2.0.x branch you are recommended to upgrade to this version. CHANGES: 2.0.6 Tue, 27 Nov 2007 10:35:27 +0100 IMPORTANT NOTES: * There are two possible Denial of Service fixes in this version of syslog-ng, therefore it is strongly recommended to upgrade to this version. Bugfixes: * HP-UX related build and runtime fixes, backported from the Premium Edition. * If unable to resolve the name of the target host, syslog-ng failed to initialize the TCP/UDP destination drivers. This behavior has been corrected. * Corrected program name parsing in incoming messages. * Fixed a problem in handling messages which lacked explicit timezone information, but the administrator specified a timezone for the messages. * Fixed some minor memory leaks in configuration reloads. * Fixed a segmentation fault which occurred when the timestamp of the incoming messages did not end with a space character (NULL pointer dereference). This is an easy Denial of Service possibility. * Fixed a segmentation fault which occurred when the PID macro was used and the message had a closing bracket (']') before an opening bracket ('['). * Fixed a possible segmentation fault for UDP6/TCP6 destinations. * Fixed IPv6 scope id resolution for link-local addresses. * Solaris related fixes. BINARY DOWNLOAD: If you have a binary subscription, you can download the latest binaries from: http://www.balabit.com/network-security/syslog-ng/opensource-logging-system… OR, if you have a platform that is supported by apt-get, use the following apt sources to fetch the latest releases: Debian GNU/Linux ---------------- sarge: deb https://USERNAME:PASSWORD@apt.balabit.com/syslog-ng/open-source/ debian-sarge/syslog-ng-2.0 syslog-ng etch: deb https://USERNAME:PASSWORD@apt.balabit.com/syslog-ng/open-source/ debian-etch/syslog-ng-2.0 syslog-ng RedHat Enterprise Linux ----------------------- RHEL-4 rpm https://USERNAME:PASSWORD@apt.balabit.com/syslog-ng/open-source/ rhel-4/syslog-ng-2.0 syslog-ng SUSE 10 ------- SUSE 10.0 rpm https://USERNAME:PASSWORD@apt.balabit.com/syslog-ng/open-source/ suse-10.0/syslog-ng-2.0 syslog-ng SUSE 10.1 rpm https://USERNAME:PASSWORD@apt.balabit.com/syslog-ng/open-source/ suse-10.1/syslog-ng-2.0 syslog-ng HTTP can also be used in the place of HTTPS If your version of apt-get does not support the HTTPS protocol. When using plain HTTP, the username and password will not be encrypted. SOURCE DOWNLOAD: The latest versions of syslog-ng in source format can be found at: http://www.balabit.com/downloads/files/syslog-ng/sources/2.0/src/ _______________________________________________ syslog-ng-announce mailing list syslog-ng-announce(a)lists.balabit.hu https://lists.balabit.hu/mailman/listinfo/syslog-ng-announce

1 0

Help understanding syslog-ng open-source code
by emanuel 28 Nov '07

28 Nov '07

Hey guys, im trying to implement a few features for the open-source version of syslog-ng. I am going to build my own device driver to better fit my needs. My problem with this task is, that the source code lacks proper commenting and you can easily get lost. Now I wanted to know if theres some special forum or source code documentation and if not, is there someone who is able and willing to answer some questions about the syslog-ng code? This would give my work a huge boost. Thanks for your responses in advance, Emanuel

3 5

[Bug 2] New: program() enhancements
by bugzilla＠bugzilla.balabit.com 27 Nov '07

27 Nov '07

https://bugzilla.balabit.com/show_bug.cgi?id=2 Summary: program() enhancements Product: syslog-ng Version: 2.1.x Platform: PC OS/Version: Linux Status: NEW Severity: normal Priority: unspecified Component: syslog-ng AssignedTo: bazsi(a)balabit.hu ReportedBy: bazsi(a)balabit.hu Type of the Report: enhancement Estimated Hours: 0.0 1) make it possible to specify the shell to be used to invoke the program destination 2) instead of restarting the process make it possible to send a signal to it using SIGHUP 3) make it possible to read the output of such programs and interpret it as log messages -- Configure bugmail: https://bugzilla.balabit.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are watching all bug changes.

1 0