Re: syslog-ng digest, Vol 1 #109 - 6 msgs
Hi syslog-ng Anyone had any luck getting scsh ??? I ran 'site idle 7200' and still get timeouts !!!
get scsh-0.5.1.tar.gz
Receiving file: scsh-0.5.1.tar.gz 0 1468685 bytes. ETA: --:--Er ror: Error occurred during read! Reason: Connection timed out ** Aborting Transfer ** Transfer aborted. Data connection closed. 0% 0 > 1468685 bytes. ETA:769:55 scsh-0.5.1.tar.gz: 1448 bytes received in 45.61 seconds, 31.75 Bytes/s. ftp-swiss.ai.mit.edu /pub/su/scsh ftp-swiss> Kind Regards Chris Thompson syslog-ng-admin@venus.terrasoft.hu wrote:
Send syslog-ng mailing list submissions to syslog-ng@lists.balabit.hu
To subscribe or unsubscribe via the web, visit http://lists.balabit.hu/mailman/listinfo/syslog-ng or, via email, send a message with subject or body 'help' to syslog-ng-request@lists.balabit.hu You can reach the person managing the list at syslog-ng-admin@lists.balabit.hu
When replying, please edit your Subject line so it is more specific than "Re: Contents of syslog-ng digest..."
Today's Topics:
1. syslog-ng 1.3.3 (Balazs Scheidler) 2. RE: syslog-ng 1.3.3 (Lowkrantz, Goran) 3. RE: syslog-ng 1.3.3 (Chris Scheller) 4. RE: syslog-ng 1.3.3 (Lowkrantz, Goran) 5. Re: syslog-ng 1.3.3 (Chris Scheller) 6. Re: syslog-ng 1.3.3 (Chris Scheller)
--__--__--
Message: 1 Date: Mon, 22 Nov 1999 22:11:14 +0100 From: Balazs Scheidler <bazsi@balabit.hu> To: syslog-ng@lists.balabit.hu Subject: [syslog-ng] syslog-ng 1.3.3 Reply-To: syslog-ng@lists.balabit.hu
Hi,
I've released syslog-ng 1.3.3, which completes the afsocket reorganization I introduced in 1.3.2. It should be quite stable now.
This fixes a problem with some programs dropping messages (for instance sendmail). It was caused by the fact the syslog-ng dropped all af_unix connections when sent a HUP signal. A new option was added to unix-stream and tcp: keep-alive, which is on by default for unix-stream drivers.
Another bug was fixed in the $DAY macro expansion.
There was a discussion recently on bugtraq about a syslogd DoS attack. The problem is fixed in distributions by switching to unix-dgram sockets from unix-stream. syslog-ng supports this switch by using another driver, so you only need to change your configuration.
An alternative solution will be provided to limit the number of simultaneous connections kept open. If this limit is reached, syslog-ng will be able to send a warning message, and messages will not be simply dropped. IMHO this solution is much better, than reverting to sock_dgram.
-- Bazsi PGP info: KeyID 9AF8D0A9 Fingerprint CD27 CFB0 802C 0944 9CFD 804E C82C 8EB1 url: http://www.balabit.hu/pgpkey.txt
--__--__--
Message: 2 From: "Lowkrantz, Goran" <Goran.Lowkrantz@infologigruppen.se> To: "'syslog-ng@venus.terrasoft.hu'" <syslog-ng@venus.terrasoft.hu> Subject: RE: [syslog-ng] syslog-ng 1.3.3 Date: Mon, 22 Nov 1999 22:48:14 +0100 charset="windows-1252" Reply-To: syslog-ng@lists.balabit.hu
Hi,
I downloaded 1.3.3 but the file src/afsocket.h.x seems to be missing, so it won't build.
Cheers, GLZ
-----Original Message----- From: Balazs Scheidler [mailto:bazsi@balabit.hu] Sent: Monday, November 22, 1999 10:11 PM To: syslog-ng@lists.balabit.hu Subject: [syslog-ng] syslog-ng 1.3.3
Hi,
I've released syslog-ng 1.3.3, which completes the afsocket reorganization I introduced in 1.3.2. It should be quite stable now.
This fixes a problem with some programs dropping messages (for instance sendmail). It was caused by the fact the syslog-ng dropped all af_unix connections when sent a HUP signal. A new option was added to unix-stream and tcp: keep-alive, which is on by default for unix-stream drivers.
Another bug was fixed in the $DAY macro expansion.
There was a discussion recently on bugtraq about a syslogd DoS attack. The problem is fixed in distributions by switching to unix-dgram sockets from unix-stream. syslog-ng supports this switch by using another driver, so you only need to change your configuration.
An alternative solution will be provided to limit the number of simultaneous connections kept open. If this limit is reached, syslog-ng will be able to send a warning message, and messages will not be simply dropped. IMHO this solution is much better, than reverting to sock_dgram.
-- Bazsi PGP info: KeyID 9AF8D0A9 Fingerprint CD27 CFB0 802C 0944 9CFD 804E C82C 8EB1 url: http://www.balabit.hu/pgpkey.txt
_______________________________________________ syslog-ng maillist - syslog-ng@lists.balabit.hu http://lists.balabit.hu/mailman/listinfo/syslog-ng
--__--__--
Message: 3 Date: Mon, 22 Nov 1999 14:26:27 -0800 (PST) From: Chris Scheller <schelcj@networkone.net> To: "'syslog-ng@venus.terrasoft.hu'" <syslog-ng@venus.terrasoft.hu> Subject: RE: [syslog-ng] syslog-ng 1.3.3 Reply-To: syslog-ng@lists.balabit.hu
I had the same problem and was told to install scsh. i did so and compile worked great. scsh can be found at ftp-swiss.ai.mit.edu/pub/su/scsh/scsh.tar.gz
Chris Scheller Network One Internet, inc. http://www.networkone.net/ System/Network Administration 1.888.GOT-NET1
On Mon, 22 Nov 1999, Lowkrantz, Goran wrote:
Hi,
I downloaded 1.3.3 but the file src/afsocket.h.x seems to be missing, so it won't build.
Cheers, GLZ
-----Original Message----- From: Balazs Scheidler [mailto:bazsi@balabit.hu] Sent: Monday, November 22, 1999 10:11 PM To: syslog-ng@lists.balabit.hu Subject: [syslog-ng] syslog-ng 1.3.3
Hi,
I've released syslog-ng 1.3.3, which completes the afsocket reorganization I introduced in 1.3.2. It should be quite stable now.
This fixes a problem with some programs dropping messages (for instance sendmail). It was caused by the fact the syslog-ng dropped all af_unix connections when sent a HUP signal. A new option was added to unix-stream and tcp: keep-alive, which is on by default for unix-stream drivers.
Another bug was fixed in the $DAY macro expansion.
There was a discussion recently on bugtraq about a syslogd DoS attack. The problem is fixed in distributions by switching to unix-dgram sockets from unix-stream. syslog-ng supports this switch by using another driver, so you only need to change your configuration.
An alternative solution will be provided to limit the number of simultaneous connections kept open. If this limit is reached, syslog-ng will be able to send a warning message, and messages will not be simply dropped. IMHO this solution is much better, than reverting to sock_dgram.
-- Bazsi PGP info: KeyID 9AF8D0A9 Fingerprint CD27 CFB0 802C 0944 9CFD 804E C82C 8EB1 url: http://www.balabit.hu/pgpkey.txt
_______________________________________________ syslog-ng maillist - syslog-ng@lists.balabit.hu http://lists.balabit.hu/mailman/listinfo/syslog-ng
_______________________________________________ syslog-ng maillist - syslog-ng@lists.balabit.hu http://lists.balabit.hu/mailman/listinfo/syslog-ng
--__--__--
Message: 4 From: "Lowkrantz, Goran" <Goran.Lowkrantz@infologigruppen.se> To: "'syslog-ng@venus.terrasoft.hu'" <syslog-ng@venus.terrasoft.hu> Subject: RE: [syslog-ng] syslog-ng 1.3.3 Date: Tue, 23 Nov 1999 01:18:52 +0100 charset="windows-1252" Reply-To: syslog-ng@lists.balabit.hu
Ok, I installed scsh but still get
make: don't know how to make afsocket.h.x. Stop *** Error code 1
Cheers, GLZ
-----Original Message----- From: Chris Scheller [mailto:schelcj@networkone.net] Sent: Monday, November 22, 1999 11:26 PM To: 'syslog-ng@venus.terrasoft.hu' Subject: RE: [syslog-ng] syslog-ng 1.3.3
I had the same problem and was told to install scsh. i did so and compile worked great. scsh can be found at ftp-swiss.ai.mit.edu/pub/su/scsh/scsh.tar.gz
Chris Scheller Network One Internet, inc. http://www.networkone.net/ System/Network Administration 1.888.GOT-NET1
On Mon, 22 Nov 1999, Lowkrantz, Goran wrote:
Hi,
I downloaded 1.3.3 but the file src/afsocket.h.x seems to be missing, so it won't build.
Cheers, GLZ
-----Original Message----- From: Balazs Scheidler [mailto:bazsi@balabit.hu] Sent: Monday, November 22, 1999 10:11 PM To: syslog-ng@lists.balabit.hu Subject: [syslog-ng] syslog-ng 1.3.3
Hi,
I've released syslog-ng 1.3.3, which completes the afsocket reorganization I introduced in 1.3.2. It should be quite stable now.
This fixes a problem with some programs dropping messages (for instance sendmail). It was caused by the fact the syslog-ng dropped all af_unix connections when sent a HUP signal. A new option was added to unix-stream and tcp: keep-alive, which is on by default for unix-stream drivers.
Another bug was fixed in the $DAY macro expansion.
There was a discussion recently on bugtraq about a syslogd DoS attack. The problem is fixed in distributions by switching to unix-dgram sockets from unix-stream. syslog-ng supports this switch by using another driver, so you only need to change your configuration.
An alternative solution will be provided to limit the number of simultaneous connections kept open. If this limit is reached, syslog-ng will be able to send a warning message, and messages will not be simply dropped. IMHO this solution is much better, than reverting to sock_dgram.
-- Bazsi PGP info: KeyID 9AF8D0A9 Fingerprint CD27 CFB0 802C 0944 9CFD 804E C82C 8EB1 url: http://www.balabit.hu/pgpkey.txt
_______________________________________________ syslog-ng maillist - syslog-ng@lists.balabit.hu http://lists.balabit.hu/mailman/listinfo/syslog-ng
_______________________________________________ syslog-ng maillist - syslog-ng@lists.balabit.hu http://lists.balabit.hu/mailman/listinfo/syslog-ng
_______________________________________________ syslog-ng maillist - syslog-ng@lists.balabit.hu http://lists.balabit.hu/mailman/listinfo/syslog-ng
--__--__--
Message: 5 Date: Mon, 22 Nov 1999 16:44:54 -0800 (PST) From: Chris Scheller <schelcj@networkone.net> To: syslog-ng@venus.terrasoft.hu cc: syslog-ng@lists.balabit.hu Subject: Re: [syslog-ng] syslog-ng 1.3.3 Reply-To: syslog-ng@lists.balabit.hu
Is it possible ( and i just missed it ) to do a destination like this destination test { file("/var/log/syslog-ng/$YEAR/$MONTH/$HOST-$DAY"); }; using the macros to create directories?
Chris Scheller Network One Internet, inc. http://www.networkone.net/ System/Network Administration 1.888.GOT-NET1
On Mon, 22 Nov 1999, Balazs Scheidler wrote:
Hi,
I've released syslog-ng 1.3.3, which completes the afsocket reorganization I introduced in 1.3.2. It should be quite stable now.
This fixes a problem with some programs dropping messages (for instance sendmail). It was caused by the fact the syslog-ng dropped all af_unix connections when sent a HUP signal. A new option was added to unix-stream and tcp: keep-alive, which is on by default for unix-stream drivers.
Another bug was fixed in the $DAY macro expansion.
There was a discussion recently on bugtraq about a syslogd DoS attack. The problem is fixed in distributions by switching to unix-dgram sockets from unix-stream. syslog-ng supports this switch by using another driver, so you only need to change your configuration.
An alternative solution will be provided to limit the number of simultaneous connections kept open. If this limit is reached, syslog-ng will be able to send a warning message, and messages will not be simply dropped. IMHO this solution is much better, than reverting to sock_dgram.
-- Bazsi PGP info: KeyID 9AF8D0A9 Fingerprint CD27 CFB0 802C 0944 9CFD 804E C82C 8EB1 url: http://www.balabit.hu/pgpkey.txt
_______________________________________________ syslog-ng maillist - syslog-ng@lists.balabit.hu http://lists.balabit.hu/mailman/listinfo/syslog-ng
--__--__--
Message: 6 Date: Mon, 22 Nov 1999 16:44:54 -0800 (PST) From: Chris Scheller <schelcj@networkone.net> To: syslog-ng@venus.terrasoft.hu cc: syslog-ng@lists.balabit.hu Subject: Re: [syslog-ng] syslog-ng 1.3.3 Reply-To: syslog-ng@lists.balabit.hu
Is it possible ( and i just missed it ) to do a destination like this destination test { file("/var/log/syslog-ng/$YEAR/$MONTH/$HOST-$DAY"); }; using the macros to create directories?
Chris Scheller Network One Internet, inc. http://www.networkone.net/ System/Network Administration 1.888.GOT-NET1
On Mon, 22 Nov 1999, Balazs Scheidler wrote:
Hi,
I've released syslog-ng 1.3.3, which completes the afsocket reorganization I introduced in 1.3.2. It should be quite stable now.
This fixes a problem with some programs dropping messages (for instance sendmail). It was caused by the fact the syslog-ng dropped all af_unix connections when sent a HUP signal. A new option was added to unix-stream and tcp: keep-alive, which is on by default for unix-stream drivers.
Another bug was fixed in the $DAY macro expansion.
There was a discussion recently on bugtraq about a syslogd DoS attack. The problem is fixed in distributions by switching to unix-dgram sockets from unix-stream. syslog-ng supports this switch by using another driver, so you only need to change your configuration.
An alternative solution will be provided to limit the number of simultaneous connections kept open. If this limit is reached, syslog-ng will be able to send a warning message, and messages will not be simply dropped. IMHO this solution is much better, than reverting to sock_dgram.
-- Bazsi PGP info: KeyID 9AF8D0A9 Fingerprint CD27 CFB0 802C 0944 9CFD 804E C82C 8EB1 url: http://www.balabit.hu/pgpkey.txt
_______________________________________________ syslog-ng maillist - syslog-ng@lists.balabit.hu http://lists.balabit.hu/mailman/listinfo/syslog-ng
--__--__--
_______________________________________________ syslog-ng maillist - syslog-ng@lists.balabit.hu http://lists.balabit.hu/mailman/listinfo/syslog-ng
End of syslog-ng Digest
participants (1)
-
Christopher James THOMPSON