And.... you win the kewpie doll, grand prize. Excellent guess. I unwound that patch, and the HUP works as it should. Sorry to throw a monkey wrench into that fix. When y'all rework it, feel free to throw it my way, and I'll gladly try out the new version (if you need me to verify that it doesn't mangle the spoofing). THANKS, as always, for the super fast response. Much appreciated!! -----Original Message----- From: syslog-ng-bounces@lists.balabit.hu [mailto:syslog-ng-bounces@lists.balabit.hu] On Behalf Of Gergely Nagy Sent: Monday, April 30, 2012 10:08 AM To: Syslog-ng users' and developers' mailing list Subject: Re: [syslog-ng] Spoofed source bug introduced in 3.3.5 On Mon, Apr 30, 2012 at 16:57, Marvin Nipper <Marvin.Nipper@stream.com> wrote:
So… I’m hoping that someone will say “ah ha”, and have some idea about what code might have changed between 3.3.4 and 3.3.5, that might have (accidentally) resulted in this behavior.
While not necessarily an ah-ha moment, but can you try reverting this patch: http://git.madhouse-project.org/debian/syslog-ng/patch/?id=a898014482f733e9c... This is the only patch between 3.3.4 and 3.3.5 that I can imagine having an effect you describe. Hopefully my hunch is correct, and then reverting this patch will fix your issue until we find a better solution. -- |8] ______________________________________________________________________________ Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng Documentation: http://www.balabit.com/support/documentation/?product=syslog-ng FAQ: http://www.balabit.com/wiki/syslog-ng-faq This e-mail may contain confidential and/or privileged information. If you are not the intended recipient (or have received this e-mail in error) please notify the sender immediately and destroy this e-mail. Any unauthorized copying, disclosure or distribution of the material in this e-mail is strictly forbidden.