On Thu, May 16, 2002 at 12:53:33PM -0600, Brad Arlt wrote:
On Thu, May 16, 2002 at 02:16:58PM -0400, dcntrnoc@cmp.com wrote:
Hi all,
I have been running syslog-ng on a handful of Solaris boxes for some time now with no problems, and am attempting to get it running on HP-UX. I have compiled (with gcc) and installed syslog-ng 1.5.16 and libol 0.3.2 on a system running HP-UX 11.00. I am using the following source statement in my config file:
source s_sys { pipe("/dev/log"); internal(); };
Err... Ah, are you sure that opening a pipe from /dev/log will yeild what you want? /dev/log is usually a Unix domain socket, which might put more in the stream asside from ASCII. I'd turn off any syslog daemons you have and just cat /dev/log | od
Sorry, but HP-UX's /dev/log is really a pipe and not a socket. The problem seems to be that programs sending messages to /dev/log write a whole 2048 bytes block regardless the real length of the message. As syslog-ng reads _lines_ from a pipe, the rest of the 2048 bytes block is also read, which is what you see there. Currently my development branch of syslog-ng 2.0 supports this, but 1.5.x doesn't. A temporary solution would be to use both original syslogd from HP-UX and have it send messages to localhost where a syslog-ng is listening. -- Bazsi PGP info: KeyID 9AF8D0A9 Fingerprint CD27 CFB0 802C 0944 9CFD 804E C82C 8EB1