[syslog-ng]Difficulty with source(net) on Solaris 8 [syslog-ng-1.5.9]

17 Sep 2001

      Greetings,

I need assistance to configure syslog-ng to log external SYSLOG messages.

I have successfully compiled the development branch version 1.5.9 as well as 
libol-0.2.24 on my Solaris8 box.

I am running into the same problem with logging external syslog messages as I 
did with version 1.4.9a.

kparis@dv-netlog$ ps -aef | grep sysl
    root   203     1  0   Sep 14 ?        0:00 /usr/sbin/syslogd
    root 10614     1  0 12:23:51 ?        0:00 /usr/local/sbin/syslog-ng -
f /usr/local/etc/syslog-ng.conf -p /var/run/syslog-ng.pid

I can snoop the interface and see the SYSLOG packets arrive:

kparis@dv-netlog$ sudo snoop 172.16.3.254
Using device /dev/hme (promiscuous mode)
172.16.3.254 -> dv-netlog    SYSLOG C port=57636 <5>371: Sep 17 13:23

I can see the messages appear into the standard syslogd 
destination /var/adm/messages:

kparis@dv-netlog$ sudo tail -f /var/adm/messages
Sep 17 13:27:39 [172.16.3.254.225.36] 371: Sep 17 13:23:54: %SYS-5-CONFIG_I: 
Configured from console by kparis on vty0 (172.16.0.60)

Only local messages (such as sudo) appear in /var/log/default.

kparis@dv-netlog$ sudo tail -f /var/log/default
Sep 17 13:17:06 dv-netlog sudo: [ID 850335 local2.notice]   kparis : 
TTY=pts/4 ; PWD=/uhome/kparis ; USER=root ; COMMAND=/usr/sbin/snoop 172.16.3.254
Sep 17 13:27:28 dv-netlog sudo: [ID 850335 local2.notice]   kparis : 
TTY=pts/3 ; PWD=/usr/local/install ; USER=root ; 
COMMAND=/usr/bin/cat /var/run/syslog-ng.pid

No external soruced messages appear into this same log as would be expected.

My syslog-ng configuration file is as follows:
kparis@dv-netlog$ more /usr/local/etc/syslog-ng.conf
options { sync(0); keep_hostname(yes); chain_hostnames(no); log_fifo_size
(30000); };
source s_local { sun-streams("/dev/log" door("/etc/.syslog_door")); };
source s_int { internal(); };
source s_net_udp { udp(); };
destination d_local { file("/var/log/default"); };
destination d_int { file("/var/log/internal"); };
log { source(s_local); source(s_net_udp); destination(d_local); };
log { source(s_int); destination(d_int); };

I am seeing a difference with truss on the syslog-ng process in that I no 
longer see the recvfrom() entries.
kparis@dv-netlog$ sudo truss -p `sudo cat /var/run/syslog-ng.pid`

poll(0xFFBEF5E8, 4, 100)                        = 0
poll(0xFFBEF5E8, 4, 60000)      (sleeping...)
signotifywait()                 (sleeping...)
lwp_cond_wait(0xFF0F55C8, 0xFF0F55D8, 0xFF1D5C48) (sleeping...)
door_return(0x00000000, 0, 0x00000000, 0) (sleeping...)
door_return(0x00000000, 0, 0x00000000, 0) (sleeping...)
poll(0xFFBEF5E8, 4, 60000)                      = 0
time()                                          = 1000758508
poll(0xFFBEF5E8, 4, 100)                        = 0
poll(0xFFBEF5E8, 4, 60000)      (sleeping...)
signotifywait()                 (sleeping...)
lwp_cond_wait(0xFF0F55C8, 0xFF0F55D8, 0xFF1D5C48) (sleeping...)
door_return(0x00000000, 0, 0x00000000, 0) (sleeping...)
door_return(0x00000000, 0, 0x00000000, 0) (sleeping...)
door_return(0x00000000, 0, 0x00000000, 0)       = 0
poll(0xFFBEF5E8, 4, 60000)                      = 1
getmsg(2, 0xFFBECCF0, 0xFFBECCE0, 0xFFBECCC4)   = 0
time()                                          = 1000758520
time()                                          = 1000758520
time()                                          = 1000758520
time()                                          = 1000758520
poll(0xFFBEF5E8, 4, 100)                        = 1
write(0, " S e p   1 7   1 3 : 2 8".., 151)     = 151
time()                                          = 1000758520
poll(0xFFBEF5E8, 4, 100)                        = 0
poll(0xFFBEF5E8, 4, 60000)      (sleeping...)
signotifywait()                 (sleeping...)
lwp_cond_wait(0xFF0F55C8, 0xFF0F55D8, 0xFF1D5C48) (sleeping...)
door_return(0x00000000, 0, 0x00000000, 0) (sleeping...)
door_return(0x00000000, 0, 0x00000000, 0) (sleeping...)
lwp_cond_wait(0xFF0F55C8, 0xFF0F55D8, 0xFF1D5C48) Err#62 ETIME
time()                                          = 1000758531
poll(0xFFBEF5E8, 4, 60000)      (sleeping...)
signotifywait()                 (sleeping...)
lwp_cond_wait(0xFF0F55C8, 0xFF0F55D8, 0xFF1D5C48) (sleeping...)
door_return(0x00000000, 0, 0x00000000, 0) (sleeping...)
door_return(0x00000000, 0, 0x00000000, 0) (sleeping...)
door_return(0x00000000, 0, 0x00000000, 0)       = 0
poll(0xFFBEF5E8, 4, 60000)                      = 1
getmsg(2, 0xFFBECCF0, 0xFFBECCE0, 0xFFBECCC4)   = 0
time()                                          = 1000758539
time()                                          = 1000758539
time()                                          = 1000758539
time()                                          = 1000758539
poll(0xFFBEF5E8, 4, 100)                        = 1
write(0, " S e p   1 7   1 3 : 2 8".., 139)     = 139
time()                                          = 1000758539
poll(0xFFBEF5E8, 4, 100)                        = 0
poll(0xFFBEF5E8, 4, 60000)      (sleeping...)
signotifywait()                 (sleeping...)
lwp_cond_wait(0xFF0F55C8, 0xFF0F55D8, 0xFF1D5C48) (sleeping...)
door_return(0x00000000, 0, 0x00000000, 0) (sleeping...)
door_return(0x00000000, 0, 0x00000000, 0) (sleeping...)
door_return(0x00000000, 0, 0x00000000, 0)       = 0
poll(0xFFBEF5E8, 4, 60000)                      = 1
getmsg(2, 0xFFBECCF0, 0xFFBECCE0, 0xFFBECCC4)   = 0
time()                                          = 1000758548
time()                                          = 1000758548
time()                                          = 1000758548
time()                                          = 1000758548
poll(0xFFBEF5E8, 4, 100)                        = 1
write(0, " S e p   1 7   1 3 : 2 9".., 150)     = 150
time()                                          = 1000758548
poll(0xFFBEF5E8, 4, 100)                        = 0
poll(0xFFBEF5E8, 4, 60000)      (sleeping...)
signotifywait()                 (sleeping...)
lwp_cond_wait(0xFF0F55C8, 0xFF0F55D8, 0xFF1D5C48) (sleeping...)
door_return(0x00000000, 0, 0x00000000, 0) (sleeping...)
door_return(0x00000000, 0, 0x00000000, 0) (sleeping...)
poll(0xFFBEF5E8, 4, 60000)                      = 0
time()                                          = 1000758609
poll(0xFFBEF5E8, 4, 100)                        = 0
poll(0xFFBEF5E8, 4, 60000)      (sleeping...)
signotifywait()                 (sleeping...)
lwp_cond_wait(0xFF0F55C8, 0xFF0F55D8, 0xFF1D5C48) (sleeping...)
door_return(0x00000000, 0, 0x00000000, 0) (sleeping...)
door_return(0x00000000, 0, 0x00000000, 0) (sleeping...)
door_return(0x00000000, 0, 0x00000000, 0)       = 0
poll(0xFFBEF5E8, 4, 60000)                      = 1
getmsg(2, 0xFFBECCF0, 0xFFBECCE0, 0xFFBECCC4)   = 0
time()                                          = 1000758668
time()                                          = 1000758668
time()                                          = 1000758668
time()                                          = 1000758668
poll(0xFFBEF5E8, 4, 100)                        = 1
write(0, " S e p   1 7   1 3 : 3 1".., 147)     = 147
time()                                          = 1000758668
poll(0xFFBEF5E8, 4, 100)                        = 0
poll(0xFFBEF5E8, 4, 60000)      (sleeping...)
signotifywait()                 (sleeping...)
lwp_cond_wait(0xFF0F55C8, 0xFF0F55D8, 0xFF1D5C48) (sleeping...)
door_return(0x00000000, 0, 0x00000000, 0) (sleeping...)
door_return(0x00000000, 0, 0x00000000, 0) (sleeping...)
door_return(0x00000000, 0, 0x00000000, 0)       = 0
poll(0xFFBEF5E8, 4, 60000)                      = 1
getmsg(2, 0xFFBECCF0, 0xFFBECCE0, 0xFFBECCC4)   = 0
time()                                          = 1000758683
time()                                          = 1000758683
time()                                          = 1000758683
time()                                          = 1000758683
poll(0xFFBEF5E8, 4, 100)                        = 1
write(0, " S e p   1 7   1 3 : 3 1".., 151)     = 151
time()                                          = 1000758683
poll(0xFFBEF5E8, 4, 100)                        = 0
poll(0xFFBEF5E8, 4, 60000)      (sleeping...)
signotifywait()                 (sleeping...)
lwp_cond_wait(0xFF0F55C8, 0xFF0F55D8, 0xFF1D5C48) (sleeping...)
door_return(0x00000000, 0, 0x00000000, 0) (sleeping...)
door_return(0x00000000, 0, 0x00000000, 0) (sleeping...)
poll(0xFFBEF5E8, 4, 60000)                      = 0
time()                                          = 1000758743
poll(0xFFBEF5E8, 4, 100)                        = 0
poll(0xFFBEF5E8, 4, 60000)      (sleeping...)
signotifywait()                 (sleeping...)
lwp_cond_wait(0xFF0F55C8, 0xFF0F55D8, 0xFF1D5C48) (sleeping...)
door_return(0x00000000, 0, 0x00000000, 0) (sleeping...)
door_return(0x00000000, 0, 0x00000000, 0) (sleeping...)
poll(0xFFBEF5E8, 4, 60000)                      = 0
time()                                          = 1000758803
poll(0xFFBEF5E8, 4, 100)                        = 0
poll(0xFFBEF5E8, 4, 60000)      (sleeping...)
signotifywait()                 (sleeping...)
lwp_cond_wait(0xFF0F55C8, 0xFF0F55D8, 0xFF1D5C48) (sleeping...)
door_return(0x00000000, 0, 0x00000000, 0) (sleeping...)
door_return(0x00000000, 0, 0x00000000, 0) (sleeping...)
lwp_cond_wait(0xFF0F55C8, 0xFF0F55D8, 0xFF1D5C48) Err#62 ETIME
time()                                          = 1000758831
poll(0xFFBEF5E8, 4, 60000)      (sleeping...)
signotifywait()                 (sleeping...)
lwp_cond_wait(0xFF0F55C8, 0xFF0F55D8, 0xFF1D5C48) (sleeping...)
door_return(0x00000000, 0, 0x00000000, 0) (sleeping...)
door_return(0x00000000, 0, 0x00000000, 0) (sleeping...)
poll(0xFFBEF5E8, 4, 60000)                      = 0
time()                                          = 1000758863
poll(0xFFBEF5E8, 4, 100)                        = 0
poll(0xFFBEF5E8, 4, 60000)      (sleeping...)
signotifywait()                 (sleeping...)
lwp_cond_wait(0xFF0F55C8, 0xFF0F55D8, 0xFF1D5C48) (sleeping...)
door_return(0x00000000, 0, 0x00000000, 0) (sleeping...)
door_return(0x00000000, 0, 0x00000000, 0) (sleeping...)

[syslog-ng]Difficulty with source(net) on Solaris 8 [syslog-ng-1.5.9]

Ken Paris