- syslog-ng - lists.balabit.hu

syslog-ng v16 compilation problem
by Pavel Golubev 26 May '99

26 May '99

Hi all, # make Making all in src make[1]: Entering directory `/usr/src/testing/syslog-ng/syslog-ng-1.1.16/src' gcc -DHAVE_CONFIG_H -I. -I/usr/src/testing/syslog-ng/syslog-ng-1.1.16/src -I. -O2 -Wall -I/tmp/syslog-ng/include/libol -c main.c gcc -DHAVE_CONFIG_H -I. -I/usr/src/testing/syslog-ng/syslog-ng-1.1.16/src -I. -O2 -Wall -I/tmp/syslog-ng/include/libol -c sources.c sources.c: In function `do_read_line': sources.c:72: warning: `length' might be used uninitialized in this function gcc -DHAVE_CONFIG_H -I. -I/usr/src/testing/syslog-ng/syslog-ng-1.1.16/src -I. -O2 -Wall -I/tmp/syslog-ng/include/libol -c center.c gcc -DHAVE_CONFIG_H -I. -I/usr/src/testing/syslog-ng/syslog-ng-1.1.16/src -I. -O2 -Wall -I/tmp/syslog-ng/include/libol -c filters.c gcc -DHAVE_CONFIG_H -I. -I/usr/src/testing/syslog-ng/syslog-ng-1.1.16/src -I. -O2 -Wall -I/tmp/syslog-ng/include/libol -c destinations.c gcc -DHAVE_CONFIG_H -I. -I/usr/src/testing/syslog-ng/syslog-ng-1.1.16/src -I. -O2 -Wall -I/tmp/syslog-ng/include/libol -c log.c gcc -DHAVE_CONFIG_H -I. -I/usr/src/testing/syslog-ng/syslog-ng-1.1.16/src -I. -O2 -Wall -I/tmp/syslog-ng/include/libol -c cfgfile.c gcc -DHAVE_CONFIG_H -I. -I/usr/src/testing/syslog-ng/syslog-ng-1.1.16/src -I. -O2 -Wall -I/tmp/syslog-ng/include/libol -c cfg-grammar.c cfg-grammar.y: In function `yyparse': cfg-grammar.y:212: dereferencing pointer to incomplete type make[1]: *** [cfg-grammar.o] Error 1 make[1]: Leaving directory `/usr/src/testing/syslog-ng/syslog-ng-1.1.16/src' make: *** [all-recursive] Error 1 --- Pavel Golubev PG810-RIPE Global Ukraine Inc.

2 1

cvs
by Balazs Scheidler 26 May '99

26 May '99

Hi, I have seen several cvs accesses, but those who attempted has most probably noticed that the cvs was NOT up to date. (it is only a mirror of my local cvs, and I update it by hand) I updated it, so it includes 1.1.16 of syslog-ng, and 0.1.16 of libol. Alternatively you can find the snapshots at: http://www.balabit.hu/downloads/syslog-ng/source -- Bazsi PGP key: http://www.balabit.hu/pgpkey.txt, or finger bazsi(a)balabit.hu

1 0

syslog-ng 1.1.16 & libol-0.1.16
by Balazs Scheidler 25 May '99

25 May '99

Hi, I have released syslog-ng 1.1.16 and the corresponding libol 0.1.16, it fixes several problems: * HP-UX sources should work now * sync () works for files as well as local option * does not lose data on the receipt of a HUP signal This should be much better than 1.1.15 was, please test it. -- Bazsi PGP key: http://www.balabit.hu/pgpkey.txt, or finger bazsi(a)balabit.hu

1 0

Re: [syslog-ng] regular expressions?
by Balazs Scheidler 24 May '99

24 May '99

Hi, >I'd like to ask you if the current stable/development version supports >filtering through regular expressions? Yes, both versions support this. In the stable version you can use both match and matchfile. match has a single parameter describing the regexp to match against, matchfile refers to a file containing several regexps (one per line). -- Bazsi PGP key: http://www.balabit.hu/pgpkey.txt, or finger bazsi(a)balabit.hu

1 0

regular expressions?
by Arek Jankowski 24 May '99

24 May '99

Hello, I'd like to ask you if the current stable/development version supports filtering through regular expressions? --- Arek J.

1 0

problems with 1.1.15
by Scott Dellinger 24 May '99

24 May '99

Today I had my first chance to try out syslog-ng 1.1.15, and I'm having some weird problems. When I send test messages locally and from another Linux box via UDP, the "message repeated" lines seem to be random. In the following, the text of each message sent was "test". There were a total of four messages sent locally, and two from the remote system. May 21 08:50:55 logger/logger syslog-ng[15831]: syslog-ng version 1.1.15 starting May 21 08:51:00 src@logger root: test May 21 08:51:07 last/kilrah message repeated 5 times May 21 08:51:38 src@logger root: test May 21 08:56:52 last/kilrah message repeated 3 times May 21 08:01:07 src@logger root: test May 21 08:01:07 src@logger root: test It's reporting repeated messages that aren't, and not reporting some that are. Then, when I try to send a message from an HP-UX box, syslog-ng *seems* to ignore it for a bit, but a few minutes later, spews onto the screen (using the default syslog-ng.conf) many, many lines along the lines of: May 21:09:19:28 logger/logger syslog-ng[15831]: io.c: do_read(): Zero length read was requested On the plus side, syslog-ng is no longer closing the UDP socket immediately upon reception of messages from HP-UX... -- Scott Dellinger Systems Administrator, JMU Technical Services dellinsd(a)jmu.edu

2 1

syslog-ng 1.1.15 & libol 0.1.14
by Balazs Scheidler 17 May '99

17 May '99

Hi, I have released $SUBJECT. udp and hostname problems are resolved and I added an option to turn off long hostname generation. (compatible with earlier syslogd): options { long_hostname(no); }; You can set sync frequency using: options { sync(10); }; which will set _global_ file sync setting. Please note that this is still buggy. Known bugs: - syslog-ng loses data, when sync is not equal to 1, and receives a HUP signal - local setting doesn't work yet (file /var/log/messages sync(10);) You'll need libol-0.1.14 to compile. -- Bazsi PGP key: http://www.balabit.hu/pgpkey.txt, or finger bazsi(a)balabit.hu

1 0

UDP problems with 1.1.14
by Scott Dellinger 15 May '99

15 May '99

Having had success running syslog-ng 1.1.14 locally, I tried just now setting it up to receive messages via UDP, but I can't get it to work. Using the output of 'lsof' as a guide, I can see that the UDP port is opened, but once I send syslog-ng a message from a remote machine, the message "vanishes" and the UDP port is closed, though the program continues to run and accept local messages. -- Scott Dellinger Systems Administrator, JMU Technical Services dellinsd(a)jmu.edu

2 5

Source IP of UDP packets
by Asmodeus 13 May '99

13 May '99

Unless I'm really wrong (and my IP logger is more broken than I thought), doesn't: inet_ntoa(packet.ip.ip_src); give you the source IP (in a nice, readable string form)? Garnered from the Linux UDP header file. .Shawn

2 1

poll() system call emulation in libc (linux)
by Balazs Scheidler 11 May '99

11 May '99

Hi, It turned out recently that the Linux libc (2.0.7 or below) emulation of poll system call is buggy. If it passed -1 as timeout (infinite), it returns immediately. This may cause bad behaviour of syslog-ng or lsh, if compiled under these systems. Future versions of libol will have a workaround this bug. -- Bazsi PGP key: http://www.balabit.hu/pgpkey.txt, or finger bazsi(a)balabit.hu

1 0