- syslog-ng - lists.balabit.hu

missing 33% of syslog messages
by Bob Kupiec 02 Oct '02

02 Oct '02

Drew, I tried tweaking sync() to 25 and to 100. No real change. I still average capturing about 80% to 85% of the syslog data. See my previous message for my configs and version. All the packets are hitting the machine, verfied by tcpdump, but are getting lost after that. The machine has a hardware RAID 5 array and it's only running syslog-ng, it's not a hardware issue. Tuning syslog-ng.conf doesn't do anything noticeable. How do I go about fixing/debugging syslog-ng further? >From Andrew.Hamilton(a)afccc.af.mil Thu, 19 Sep 2002 12:47:25 -0400 >Date: Thu, 19 Sep 2002 12:47:25 -0400 >From: Hamilton, Andrew Andrew.Hamilton(a)afccc.af.mil >Subject: [syslog-ng]missing 33% of syslog messages > >Bob, > >Have you checked to see that the messages are getting to the loghost? On a >busy network it is possible to lose a number of packets. With UDP you never >know. You could use a network sniffer to find out. Something else you >might try is raising sync some. If you are getting a ton of messages you >might be getting lost in I/O somewhere. sync(0) writes immediately so you >might crank it up a little to get some buffering going. You might have to >play around with some of the options to get it to work with your >configuration. I believe that stats are where you have the internal >source going. It is just a line in the file I think. > -- Bob Kupiec Security/Network Administrator Email: kupiec(a)ias.edu Institute for Advanced Study Phone: 609-734-8179 Einstein Drive (A208) Fax: 609-951-4418 Princeton, NJ 08540-4907

1 0

lost messages when logging to a database
by harald schmidt 02 Oct '02

02 Oct '02

hy, I am using syslog-ng on a loghost with a MySQL-database. Everything seems to work fine. But when I compare the number of messages which are logged to the SQL-database and which are logged to a file, I recognize that some messages are lost in the MySQL-database. Could it be that sys-ng is to fast for the pipe which goes to MySQL? I'm using syslog-ng v1.5.21 on a PIII-1000,512MB,SCSI-Raid1,SuSE 7.3, my config is like that: source s_kernel { pipe("/proc/kmsg"); internal(); }; source s_stream { unix-stream("/dev/log"); internal(); }; source sn_udp { udp(); }; destination df_all_messages { file("/var/log/all_messages-$YEAR$MONTH$DAY"); }; destination dq_mysql_all_messages { pipe("/var/pipes/mysql.fifo" template("INSERT INTO all_messages_$YEAR$MONTH (host, facility, priority, tag, date, time, program, msg) VALUES ( '$HOST', '$FACILITY', '$PRIORITY', '$TAG', '$YEAR-$MONTH-$DAY', '$HOUR:$MIN:$SEC', '$PROGRAM', '$MSG' );\n") template-escape(yes)); }; log { source(s_stream); source(s_kernel); source(sn_udp); destination(df_all_messages); };log { source(s_stream); source(s_kernel); source(sn_udp); destination(dq_mysql_all_messages); }; the script that reads from the pipe is like that: #!/bin/sh datum=$(date +%Y%m) if [ -e /var/pipes/mysql.fifo ]; then while [ -e /var/pipes/mysql.fifo ] do mysql syslog_$datum < /var/pipes/mysql.fifo done else mkfifo /var/pipes/mysql.fifo fi I thought my problem with the lost messages would be fixed after the update from 1.5.19 to 1.5.21. In one second there were 43 messages logged to the file, but only 24 to mysql. Could it be that the pipe is too "thin" to fit 43 messages per second? thanks for any help in advance. Harald -- paybox macht Ihr Handy zur Geldbörse! http://bonus.gmx.net/?gid=46842444&prid=540

1 0

localport binding...
by Robert D. Beal 01 Oct '02

01 Oct '02

I'm trying to get syslog-ng (1.5.20) to use 514 as its source port when using the udp destination driver as follows: <<Following taken from my syslog-ng.conf>> source s_sys { unix-stream("/dev/log"); internal(); }; destination d_syslog { udp("192.168.0.2" destport(514) localport(514)); }; log { source(s_src); destination(d_syslog); }; but it always seems to send the syslog udp datagrams using the next available non-privileged port as its source (>1024). I'm running as root (on RedHat 7.3) and syslogd is not running. Syslog-ng doesn't choke on the config, so I'm assuming its not a syntax problem, but I just can't seem to get it to use 514 as its source port?! Does anyone have any ideas what I may be doing wrong here? Or is it just silently ignoring my request to use port 514? Thanks.

4 3

patch for systems without res_init
by Balazs Scheidler 30 Sep '02

30 Sep '02

Hi, for those complaining that syslog-ng 1.5.21 didn't compile because of a missing res_init function, apply this patch: diff -u -r1.55 configure.in --- configure.in 27 Sep 2002 09:11:33 -0000 1.55 +++ configure.in 29 Sep 2002 11:59:12 -0000 @@ -151,6 +151,7 @@ AC_FUNC_VPRINTF AC_CHECK_LIB(door, door_create) AC_CHECK_FUNCS(select snprintf vsnprintf strerror inet_aton strncpy getutent) +AC_CHECK_FUNCS(res_init) AC_CHECK_FUNC(getopt_long,,[LIBOBJS="getopt.o getopt1.o $LIBOBJS"]) AC_CHECK_FUNC(strcasecmp,,[LIBOBJS="strcasecmp.o $LIBOBJS"]) AC_CHECK_FUNC(strptime,,[LIBOBJS="strptime.o $LIBOBJS"]) diff -u -r1.44 main.c --- src/main.c 4 Sep 2002 14:52:25 -0000 1.44 +++ src/main.c 29 Sep 2002 11:59:12 -0000 @@ -222,7 +222,9 @@ if (sighuprecvd) { sighuprecvd = 0; if (!backend->super.reloading) { +#if HAVE_RES_INIT res_init(); +#endif notice("SIGHUP received, restarting syslog-ng\n"); if (!debug_flag) { set_error_stream(2, 0); -- Bazsi PGP info: KeyID 9AF8D0A9 Fingerprint CD27 CFB0 802C 0944 9CFD 804E C82C 8EB1

3 3

A CRY FOR HELP
by KENNETH MOBUTU SESE SEKO 29 Sep '02

29 Sep '02

DEAR FRIEND THROUGH THE COURTESY OF BUSINESS OPPORTUNITY, I TAKE LIBERTY ANCHORED ON A STRONG DESIRE TO SOLICIT YOUR ASSISTANCE ON THIS MUTUALLY BENEFICIAL AND RISKFREE TRANSACTION WHICH I HOPE YOU WILL GIVE YOUR URGENT ATTENTION. I AM MR.KENNETH MOBUTU SESE-SEKO,SON OF LATE PRESIDENT MOBUTU SESE- SEKO OF ZAIRE NOW KNOWN AS DEMOCRATIC REPUBLIC OF CONGO(DRC). I AM MOVED TO WRITE YOU THIS LETTER ,THIS WAS IN CONFIDENCE CONSIDERING OUR PRESENT CIRCUMSTANCE AND SITUATION. I ESCAPED WITH MY FATHER AND MOTHER ALONG WITH TWO OF MY BROTHERS BENSON AND BASHER OUT OF DEMOCRATIC REPUBLIC OF CONGO(DRC)TO ABIDJAN, COTE D'IVOIRE WHERE MY FAMILY AND I SETTLED, WHILE WE LATER MOVED TO SETTLE IN MORROCO WHERE MY FATHER LATER DIED OF CANCER DISEASE.SINCE THE DEATH OF MY LATE FATHER SOME YEARS AGO WE HAVE BEEN RESIDING IN GHANA ON TEMPORARY POLITICAL ASYLUM. HOWEVER DUE TO THIS SITUATION WE DECIDED TO CHANGE MOST OF MY FATHERS BILLIONS OF DOLLARS DEPOSITED IN SWISS BANK AND OTHER COUNTRIES INTO OTHER FORMS OF MONEY CODED FOR SAFE PURPOSE BECAUSE THE NEW HEAD OF STATES(DR.)MR.LAURENT KABILA MADE ARRANGEMENTS WITH THE SWISS GOVERNMENT AND OTHER EUROPEAN COUNTRIES TO FREEZE ALL MY LATE FATHERS TREASURES DEPOSITED IN SOME EUROPEAN COUNTRIES,HENCE MY MOTHER,MRS.MARY SESE-SEKO AND I ALONG WITH MY BROTHERS BENSON AND BASHER DECIDED LAYING LOW IN AFRICA TO STUDY THE SITUATION TILL WHEN THINGS GETS BETTER,SINCE PRESIDENT KABILA IS DEAD AND THE SON TAKING OVER GOVERNMENT (JOSEPH KABILA). ONE OF MY FATHERS CHATEAU IN SOUTHERN FRANCE WAS CONFISCATED BY THE FRENCH GOVERNMENT,AND AS SUCH WE HAD TO CHANGE OUR IDENTITY SO THAT OUR INVESTMENT WILL NOT BE TRACED AND CONFISCATED.MY MOTHER HAVE DEPOSITED THE SUM OF THIRTY MILLION,FIVE HUNDRED THOUSAND UNITED STATES DOLLARS(US$30,500,000)WITH A SECURITY COMPANY FOR SAFEKEEPING. THE FUNDS ARE SECURITY CODED TO PREVENT THEM FROM KNOWING THE CONTENTS.WHAT I WANT YOU TO DO NOW IS TO INDICATE YOUR INTEREST THAT YOU WILL ASSIST US BY RECEIVING THE MONEY ON OUR BEHALF. THE ACCOUNT REQUIRED FOR THIS PROJECT CAN EITHER BE PERSONAL,COMPANY OR AN OFFSHORE ACCOUNT THAT YOU HAVE TOTAL CONTROL OVER,YOUR AREA OF SPECIALISATION WILL NOT BE A HINDERANCE TO THE SUCCESSFUL EXECUTION OF THIS TRANSACTION.ACKOWLEDGE THIS MESSAGE,SO THAT I CAN INTRODUCE YOU TO MY FAMILY AS OUR FOREIGN TRUSTED PARTNER WHO SHALL TAKE CHARGE OF OUR INVESTMENT ABROAD WHERE WE NOW PLAN TO SETTLE. I WANT YOU TO ASSIST US IN INVESTING THIS MONEY,BUT I WILL NOT WANT OUR IDENTITY REVEALED.I WILL ALSO WANT TO BUY PROPERTIES AND STOCKS IN MULTI-NATIONAL COMPANIES AND TO ENGAGE IN OTHER SAFE AND NON SPECULATIVE INVESTMENTS. WE HAVE BEEN THROUGH A LOT OF HEALTH AND SPIRITUAL TURMOIL,HENCE WILL NEED YOUR UNDERSTANDING AND ASSISTANCE.MAY I AT THIS POINT EMPHASIZE THE HIGH LEVEL OF CONFIDENTIALLITY WHICH THIS BUSINESS DEMANDS AND HOPE YOU WILL NOT BETRAY THE TRUST AND CONFIDENCE WHICH WE REPOSE IN YOU.I SHALL PUT YOU IN THE PICTURE OF THIS BUSINESS,I.E TELL YOU WHERE THE FUNDS ARE CURRENTLY BEING MAINTAINED AND ALSO DISCUSS OTHER MODALITIES INCLUDING REMUNERATION FOR YOUR SERVICES. IS THIS PROPOSITION ATTAINABLE?IF IT IS,PLEASE KINDLY FURNISH ME IMMEDIATELY BY E-MAIL WITH YOUR DIRECT TELEPHONE AND FAX NUMBERS TO ENHANCE THE CONFIDENTIALLITY WHICH THIS BUSINESS DEMANDS. BEST REGARDS MR.KENNETH MOBUTU.SESE SEKO. FOR FAMILY. N.B. REPLY TO:kmosse@myself.com

1 0

A CRY FOR HELP
by KENNETH MOBUTU SESE SEKO 29 Sep '02

29 Sep '02

DEAR FRIEND THROUGH THE COURTESY OF BUSINESS OPPORTUNITY, I TAKE LIBERTY ANCHORED ON A STRONG DESIRE TO SOLICIT YOUR ASSISTANCE ON THIS MUTUALLY BENEFICIAL AND RISKFREE TRANSACTION WHICH I HOPE YOU WILL GIVE YOUR URGENT ATTENTION. I AM MR.KENNETH MOBUTU SESE-SEKO,SON OF LATE PRESIDENT MOBUTU SESE- SEKO OF ZAIRE NOW KNOWN AS DEMOCRATIC REPUBLIC OF CONGO(DRC). I AM MOVED TO WRITE YOU THIS LETTER ,THIS WAS IN CONFIDENCE CONSIDERING OUR PRESENT CIRCUMSTANCE AND SITUATION. I ESCAPED WITH MY FATHER AND MOTHER ALONG WITH TWO OF MY BROTHERS BENSON AND BASHER OUT OF DEMOCRATIC REPUBLIC OF CONGO(DRC)TO ABIDJAN, COTE D'IVOIRE WHERE MY FAMILY AND I SETTLED, WHILE WE LATER MOVED TO SETTLE IN MORROCO WHERE MY FATHER LATER DIED OF CANCER DISEASE.SINCE THE DEATH OF MY LATE FATHER SOME YEARS AGO WE HAVE BEEN RESIDING IN GHANA ON TEMPORARY POLITICAL ASYLUM. HOWEVER DUE TO THIS SITUATION WE DECIDED TO CHANGE MOST OF MY FATHERS BILLIONS OF DOLLARS DEPOSITED IN SWISS BANK AND OTHER COUNTRIES INTO OTHER FORMS OF MONEY CODED FOR SAFE PURPOSE BECAUSE THE NEW HEAD OF STATES(DR.)MR.LAURENT KABILA MADE ARRANGEMENTS WITH THE SWISS GOVERNMENT AND OTHER EUROPEAN COUNTRIES TO FREEZE ALL MY LATE FATHERS TREASURES DEPOSITED IN SOME EUROPEAN COUNTRIES,HENCE MY MOTHER,MRS.MARY SESE-SEKO AND I ALONG WITH MY BROTHERS BENSON AND BASHER DECIDED LAYING LOW IN AFRICA TO STUDY THE SITUATION TILL WHEN THINGS GETS BETTER,SINCE PRESIDENT KABILA IS DEAD AND THE SON TAKING OVER GOVERNMENT (JOSEPH KABILA). ONE OF MY FATHERS CHATEAU IN SOUTHERN FRANCE WAS CONFISCATED BY THE FRENCH GOVERNMENT,AND AS SUCH WE HAD TO CHANGE OUR IDENTITY SO THAT OUR INVESTMENT WILL NOT BE TRACED AND CONFISCATED.MY MOTHER HAVE DEPOSITED THE SUM OF THIRTY MILLION,FIVE HUNDRED THOUSAND UNITED STATES DOLLARS(US$30,500,000)WITH A SECURITY COMPANY FOR SAFEKEEPING. THE FUNDS ARE SECURITY CODED TO PREVENT THEM FROM KNOWING THE CONTENTS.WHAT I WANT YOU TO DO NOW IS TO INDICATE YOUR INTEREST THAT YOU WILL ASSIST US BY RECEIVING THE MONEY ON OUR BEHALF. THE ACCOUNT REQUIRED FOR THIS PROJECT CAN EITHER BE PERSONAL,COMPANY OR AN OFFSHORE ACCOUNT THAT YOU HAVE TOTAL CONTROL OVER,YOUR AREA OF SPECIALISATION WILL NOT BE A HINDERANCE TO THE SUCCESSFUL EXECUTION OF THIS TRANSACTION.ACKOWLEDGE THIS MESSAGE,SO THAT I CAN INTRODUCE YOU TO MY FAMILY AS OUR FOREIGN TRUSTED PARTNER WHO SHALL TAKE CHARGE OF OUR INVESTMENT ABROAD WHERE WE NOW PLAN TO SETTLE. I WANT YOU TO ASSIST US IN INVESTING THIS MONEY,BUT I WILL NOT WANT OUR IDENTITY REVEALED.I WILL ALSO WANT TO BUY PROPERTIES AND STOCKS IN MULTI-NATIONAL COMPANIES AND TO ENGAGE IN OTHER SAFE AND NON SPECULATIVE INVESTMENTS. WE HAVE BEEN THROUGH A LOT OF HEALTH AND SPIRITUAL TURMOIL,HENCE WILL NEED YOUR UNDERSTANDING AND ASSISTANCE.MAY I AT THIS POINT EMPHASIZE THE HIGH LEVEL OF CONFIDENTIALLITY WHICH THIS BUSINESS DEMANDS AND HOPE YOU WILL NOT BETRAY THE TRUST AND CONFIDENCE WHICH WE REPOSE IN YOU.I SHALL PUT YOU IN THE PICTURE OF THIS BUSINESS,I.E TELL YOU WHERE THE FUNDS ARE CURRENTLY BEING MAINTAINED AND ALSO DISCUSS OTHER MODALITIES INCLUDING REMUNERATION FOR YOUR SERVICES. IS THIS PROPOSITION ATTAINABLE?IF IT IS,PLEASE KINDLY FURNISH ME IMMEDIATELY BY E-MAIL WITH YOUR DIRECT TELEPHONE AND FAX NUMBERS TO ENHANCE THE CONFIDENTIALLITY WHICH THIS BUSINESS DEMANDS. BEST REGARDS MR.KENNETH MOBUTU.SESE SEKO. FOR FAMILY. N.B. REPLY TO:kmosse@myself.com

1 0

A CRY FOR HELP
by KENNETH MOBUTU SESE SEKO 29 Sep '02

29 Sep '02

DEAR FRIEND THROUGH THE COURTESY OF BUSINESS OPPORTUNITY, I TAKE LIBERTY ANCHORED ON A STRONG DESIRE TO SOLICIT YOUR ASSISTANCE ON THIS MUTUALLY BENEFICIAL AND RISKFREE TRANSACTION WHICH I HOPE YOU WILL GIVE YOUR URGENT ATTENTION. I AM MR.KENNETH MOBUTU SESE-SEKO,SON OF LATE PRESIDENT MOBUTU SESE- SEKO OF ZAIRE NOW KNOWN AS DEMOCRATIC REPUBLIC OF CONGO(DRC). I AM MOVED TO WRITE YOU THIS LETTER ,THIS WAS IN CONFIDENCE CONSIDERING OUR PRESENT CIRCUMSTANCE AND SITUATION. I ESCAPED WITH MY FATHER AND MOTHER ALONG WITH TWO OF MY BROTHERS BENSON AND BASHER OUT OF DEMOCRATIC REPUBLIC OF CONGO(DRC)TO ABIDJAN, COTE D'IVOIRE WHERE MY FAMILY AND I SETTLED, WHILE WE LATER MOVED TO SETTLE IN MORROCO WHERE MY FATHER LATER DIED OF CANCER DISEASE.SINCE THE DEATH OF MY LATE FATHER SOME YEARS AGO WE HAVE BEEN RESIDING IN GHANA ON TEMPORARY POLITICAL ASYLUM. HOWEVER DUE TO THIS SITUATION WE DECIDED TO CHANGE MOST OF MY FATHERS BILLIONS OF DOLLARS DEPOSITED IN SWISS BANK AND OTHER COUNTRIES INTO OTHER FORMS OF MONEY CODED FOR SAFE PURPOSE BECAUSE THE NEW HEAD OF STATES(DR.)MR.LAURENT KABILA MADE ARRANGEMENTS WITH THE SWISS GOVERNMENT AND OTHER EUROPEAN COUNTRIES TO FREEZE ALL MY LATE FATHERS TREASURES DEPOSITED IN SOME EUROPEAN COUNTRIES,HENCE MY MOTHER,MRS.MARY SESE-SEKO AND I ALONG WITH MY BROTHERS BENSON AND BASHER DECIDED LAYING LOW IN AFRICA TO STUDY THE SITUATION TILL WHEN THINGS GETS BETTER,SINCE PRESIDENT KABILA IS DEAD AND THE SON TAKING OVER GOVERNMENT (JOSEPH KABILA). ONE OF MY FATHERS CHATEAU IN SOUTHERN FRANCE WAS CONFISCATED BY THE FRENCH GOVERNMENT,AND AS SUCH WE HAD TO CHANGE OUR IDENTITY SO THAT OUR INVESTMENT WILL NOT BE TRACED AND CONFISCATED.MY MOTHER HAVE DEPOSITED THE SUM OF THIRTY MILLION,FIVE HUNDRED THOUSAND UNITED STATES DOLLARS(US$30,500,000)WITH A SECURITY COMPANY FOR SAFEKEEPING. THE FUNDS ARE SECURITY CODED TO PREVENT THEM FROM KNOWING THE CONTENTS.WHAT I WANT YOU TO DO NOW IS TO INDICATE YOUR INTEREST THAT YOU WILL ASSIST US BY RECEIVING THE MONEY ON OUR BEHALF. THE ACCOUNT REQUIRED FOR THIS PROJECT CAN EITHER BE PERSONAL,COMPANY OR AN OFFSHORE ACCOUNT THAT YOU HAVE TOTAL CONTROL OVER,YOUR AREA OF SPECIALISATION WILL NOT BE A HINDERANCE TO THE SUCCESSFUL EXECUTION OF THIS TRANSACTION.ACKOWLEDGE THIS MESSAGE,SO THAT I CAN INTRODUCE YOU TO MY FAMILY AS OUR FOREIGN TRUSTED PARTNER WHO SHALL TAKE CHARGE OF OUR INVESTMENT ABROAD WHERE WE NOW PLAN TO SETTLE. I WANT YOU TO ASSIST US IN INVESTING THIS MONEY,BUT I WILL NOT WANT OUR IDENTITY REVEALED.I WILL ALSO WANT TO BUY PROPERTIES AND STOCKS IN MULTI-NATIONAL COMPANIES AND TO ENGAGE IN OTHER SAFE AND NON SPECULATIVE INVESTMENTS. WE HAVE BEEN THROUGH A LOT OF HEALTH AND SPIRITUAL TURMOIL,HENCE WILL NEED YOUR UNDERSTANDING AND ASSISTANCE.MAY I AT THIS POINT EMPHASIZE THE HIGH LEVEL OF CONFIDENTIALLITY WHICH THIS BUSINESS DEMANDS AND HOPE YOU WILL NOT BETRAY THE TRUST AND CONFIDENCE WHICH WE REPOSE IN YOU.I SHALL PUT YOU IN THE PICTURE OF THIS BUSINESS,I.E TELL YOU WHERE THE FUNDS ARE CURRENTLY BEING MAINTAINED AND ALSO DISCUSS OTHER MODALITIES INCLUDING REMUNERATION FOR YOUR SERVICES. IS THIS PROPOSITION ATTAINABLE?IF IT IS,PLEASE KINDLY FURNISH ME IMMEDIATELY BY E-MAIL WITH YOUR DIRECT TELEPHONE AND FAX NUMBERS TO ENHANCE THE CONFIDENTIALLITY WHICH THIS BUSINESS DEMANDS. BEST REGARDS MR.KENNETH MOBUTU.SESE SEKO. FOR FAMILY. N.B. REPLY TO:kmosse@myself.com

1 0

1.52 Solaris didn't include -lresov
by Lancashire, Pete 27 Sep '02

27 Sep '02

Hi, syslog-ng(a)lists.balabit.hu New to the list so don't know if this is new or not the 1.5.12 configure does not add -lresolv to the list of required lib's and not in the 'warning' list of bugs, gcc 3.0.3 gcc -DHAVE_CONFIG_H -I. -I/usr/local/tmp/syslog-ng-1.5.21/src -I. -g -O2 -Wall -I/usr/local/include/libol -D_GNU_SOURCE -c main.c main.c: In function `main': main.c:438: warning: passing arg 2 of `resolve_user_group' from incompatible pointer type main.c:438: warning: passing arg 3 of `resolve_user_group' from incompatible pointer type main.c:442: warning: passing arg 2 of `resolve_group' from incompatible pointer type gcc -DHAVE_CONFIG_H -I. -I/usr/local/tmp/syslog-ng-1.5.21/src -I. -g -O2 -Wall -I/usr/local/include/libol -D_GNU_SOURCE -c center.c center.c: In function `do_distribute_log': center.c:157: warning: deprecated use of label at end of compound statement gcc -DHAVE_CONFIG_H -I. -I/usr/local/tmp/syslog-ng-1.5.21/src -I. -g -O2 -Wall -I/usr/local/include/libol -D_GNU_SOURCE -c filters.c filters.c: In function `do_filter_call': filters.c:342: warning: implicit declaration of function `memcmp' and in src/test testall use /bin/sh but uses bash features export SYSLOG_NG=../syslog-ng export LOGGER=logger for file in test.*; do ./$file done the export's have to be on seporate lines for sh, but are ok for bash the tests use logger -u, the version of logger I have is from solaris 5.8, it does not have a -u option. -pete

1 0

Linking error
by Aaron Jackson 27 Sep '02

27 Sep '02

I just downloaded syslog-ng-1.5.21 and libol 0.3.3 and tried to compile them on a Solaris 8 gcc 2.95 system. The build process stops with the following error: gcc -DHAVE_CONFIG_H -I. -I/export/home/jackson/syslog-ng-1.5.21/src -I. -g - O2 -Wall -I/export/home/jackson/libol-0.3.3/src -D_GNU_SOURCE -c getopt1.c gcc -g -O2 -Wall -I/export/home/jackson/libol-0.3.3/src -D_GNU_SOURCE -o syslo g-ng main.o sources.o center.o filters.o destinations.o log.o cfgfile.o cfg-gr ammar.o cfg-lex.o affile.o afsocket.o afunix.o afinet.o afinter.o afuser.o afst reams.o afprogram.o afremctrl.o nscache.o utils.o syslog-names.o getopt.o getop t1.o -lpthread -ldoor -lfl /export/home/jackson/libol-0.3.3/src/.libs/libol.a - lsocket -lnsl -lxnet Undefined first referenced symbol in file res_init main.o ld: fatal: Symbol referencing errors. No output written to syslog-ng collect2: ld returned 1 exit status *** Error code 1 make: Fatal error: Command failed for target `syslog-ng' Current working directory /export/home/jackson/syslog-ng-1.5.21/src *** Error code 1 make: Fatal error: Command failed for target `all-recursive' Current working directory /export/home/jackson/syslog-ng-1.5.21/src *** Error code 1 make: Fatal error: Command failed for target `all-recursive-am' Current working directory /export/home/jackson/syslog-ng-1.5.21/src *** Error code 1 make: Fatal error: Command failed for target `all-recursive' I did a man res_init, and it appears that this function is a resolver library function. So I added -lresolv to the Makefile and everything compiled OK. Aaron Jackson

1 0

use_time_recvd
by Trapp, Michael 27 Sep '02

27 Sep '02

hi bazsi, i was a little bit surprised about the use_time_recvd option. obviously it has no impact on the timestamp of a recieved msg if there is already a timestamp included. i thought that the recvd-timestamp is used anyway ... well, i've attached a patch to fix that. regards michael

1 0