[syslog-ng] Re: syslog-ng digest, Vol 1 #109 - 6 msgs
Christopher James THOMPSON
cjt@comnet.com.au
Tue, 23 Nov 1999 19:03:36 +1100
Hi syslog-ng
Anyone had any luck getting scsh ???
I ran 'site idle 7200' and still get timeouts !!!
> get scsh-0.5.1.tar.gz
Receiving file: scsh-0.5.1.tar.gz
0 1468685 bytes. ETA: --:--Er
ror: Error occurred during read!
Reason: Connection timed out
** Aborting Transfer **
Transfer aborted. Data connection closed.
0% 0 > 1468685 bytes. ETA:769:55
scsh-0.5.1.tar.gz: 1448 bytes received in 45.61 seconds, 31.75 Bytes/s.
ftp-swiss.ai.mit.edu /pub/su/scsh
ftp-swiss>
Kind Regards
Chris Thompson
syslog-ng-admin@venus.terrasoft.hu wrote:
> Send syslog-ng mailing list submissions to
> syslog-ng@lists.balabit.hu
>
> To subscribe or unsubscribe via the web, visit
> http://lists.balabit.hu/mailman/listinfo/syslog-ng
> or, via email, send a message with subject or body 'help' to
> syslog-ng-request@lists.balabit.hu
> You can reach the person managing the list at
> syslog-ng-admin@lists.balabit.hu
>
> When replying, please edit your Subject line so it is more specific than
> "Re: Contents of syslog-ng digest..."
>
> Today's Topics:
>
> 1. syslog-ng 1.3.3 (Balazs Scheidler)
> 2. RE: syslog-ng 1.3.3 (Lowkrantz, Goran)
> 3. RE: syslog-ng 1.3.3 (Chris Scheller)
> 4. RE: syslog-ng 1.3.3 (Lowkrantz, Goran)
> 5. Re: syslog-ng 1.3.3 (Chris Scheller)
> 6. Re: syslog-ng 1.3.3 (Chris Scheller)
>
> --__--__--
>
> Message: 1
> Date: Mon, 22 Nov 1999 22:11:14 +0100
> From: Balazs Scheidler <bazsi@balabit.hu>
> To: syslog-ng@lists.balabit.hu
> Subject: [syslog-ng] syslog-ng 1.3.3
> Reply-To: syslog-ng@lists.balabit.hu
>
> Hi,
>
> I've released syslog-ng 1.3.3, which completes the afsocket reorganization I
> introduced in 1.3.2. It should be quite stable now.
>
> This fixes a problem with some programs dropping messages (for instance
> sendmail). It was caused by the fact the syslog-ng dropped all af_unix
> connections when sent a HUP signal. A new option was added to unix-stream
> and tcp: keep-alive, which is on by default for unix-stream drivers.
>
> Another bug was fixed in the $DAY macro expansion.
>
> There was a discussion recently on bugtraq about a syslogd DoS attack. The
> problem is fixed in distributions by switching to unix-dgram sockets from
> unix-stream. syslog-ng supports this switch by using another driver, so you
> only need to change your configuration.
>
> An alternative solution will be provided to limit the number of simultaneous
> connections kept open. If this limit is reached, syslog-ng will be able to
> send a warning message, and messages will not be simply dropped. IMHO this
> solution is much better, than reverting to sock_dgram.
>
> --
> Bazsi
> PGP info: KeyID 9AF8D0A9 Fingerprint CD27 CFB0 802C 0944 9CFD 804E C82C 8EB1
> url: http://www.balabit.hu/pgpkey.txt
>
> --__--__--
>
> Message: 2
> From: "Lowkrantz, Goran" <Goran.Lowkrantz@infologigruppen.se>
> To: "'syslog-ng@venus.terrasoft.hu'" <syslog-ng@venus.terrasoft.hu>
> Subject: RE: [syslog-ng] syslog-ng 1.3.3
> Date: Mon, 22 Nov 1999 22:48:14 +0100
> charset="windows-1252"
> Reply-To: syslog-ng@lists.balabit.hu
>
> Hi,
>
> I downloaded 1.3.3 but the file src/afsocket.h.x seems to be missing, so it
> won't build.
>
> Cheers,
> GLZ
>
> -----Original Message-----
> From: Balazs Scheidler [mailto:bazsi@balabit.hu]
> Sent: Monday, November 22, 1999 10:11 PM
> To: syslog-ng@lists.balabit.hu
> Subject: [syslog-ng] syslog-ng 1.3.3
>
> Hi,
>
> I've released syslog-ng 1.3.3, which completes the afsocket reorganization I
> introduced in 1.3.2. It should be quite stable now.
>
> This fixes a problem with some programs dropping messages (for instance
> sendmail). It was caused by the fact the syslog-ng dropped all af_unix
> connections when sent a HUP signal. A new option was added to unix-stream
> and tcp: keep-alive, which is on by default for unix-stream drivers.
>
> Another bug was fixed in the $DAY macro expansion.
>
> There was a discussion recently on bugtraq about a syslogd DoS attack. The
> problem is fixed in distributions by switching to unix-dgram sockets from
> unix-stream. syslog-ng supports this switch by using another driver, so you
> only need to change your configuration.
>
> An alternative solution will be provided to limit the number of simultaneous
> connections kept open. If this limit is reached, syslog-ng will be able to
> send a warning message, and messages will not be simply dropped. IMHO this
> solution is much better, than reverting to sock_dgram.
>
> --
> Bazsi
> PGP info: KeyID 9AF8D0A9 Fingerprint CD27 CFB0 802C 0944 9CFD 804E C82C 8EB1
> url: http://www.balabit.hu/pgpkey.txt
>
> _______________________________________________
> syslog-ng maillist - syslog-ng@lists.balabit.hu
> http://lists.balabit.hu/mailman/listinfo/syslog-ng
>
> --__--__--
>
> Message: 3
> Date: Mon, 22 Nov 1999 14:26:27 -0800 (PST)
> From: Chris Scheller <schelcj@networkone.net>
> To: "'syslog-ng@venus.terrasoft.hu'" <syslog-ng@venus.terrasoft.hu>
> Subject: RE: [syslog-ng] syslog-ng 1.3.3
> Reply-To: syslog-ng@lists.balabit.hu
>
> I had the same problem and was told to install scsh. i did so and compile
> worked great. scsh can be found at
> ftp-swiss.ai.mit.edu/pub/su/scsh/scsh.tar.gz
>
> Chris Scheller
> Network One Internet, inc.
> http://www.networkone.net/
> System/Network Administration
> 1.888.GOT-NET1
>
> On Mon, 22 Nov 1999, Lowkrantz, Goran wrote:
>
> > Hi,
> >
> > I downloaded 1.3.3 but the file src/afsocket.h.x seems to be missing, so it
> > won't build.
> >
> > Cheers,
> > GLZ
> >
> > -----Original Message-----
> > From: Balazs Scheidler [mailto:bazsi@balabit.hu]
> > Sent: Monday, November 22, 1999 10:11 PM
> > To: syslog-ng@lists.balabit.hu
> > Subject: [syslog-ng] syslog-ng 1.3.3
> >
> >
> > Hi,
> >
> > I've released syslog-ng 1.3.3, which completes the afsocket reorganization I
> > introduced in 1.3.2. It should be quite stable now.
> >
> > This fixes a problem with some programs dropping messages (for instance
> > sendmail). It was caused by the fact the syslog-ng dropped all af_unix
> > connections when sent a HUP signal. A new option was added to unix-stream
> > and tcp: keep-alive, which is on by default for unix-stream drivers.
> >
> > Another bug was fixed in the $DAY macro expansion.
> >
> > There was a discussion recently on bugtraq about a syslogd DoS attack. The
> > problem is fixed in distributions by switching to unix-dgram sockets from
> > unix-stream. syslog-ng supports this switch by using another driver, so you
> > only need to change your configuration.
> >
> > An alternative solution will be provided to limit the number of simultaneous
> > connections kept open. If this limit is reached, syslog-ng will be able to
> > send a warning message, and messages will not be simply dropped. IMHO this
> > solution is much better, than reverting to sock_dgram.
> >
> > --
> > Bazsi
> > PGP info: KeyID 9AF8D0A9 Fingerprint CD27 CFB0 802C 0944 9CFD 804E C82C 8EB1
> > url: http://www.balabit.hu/pgpkey.txt
> >
> > _______________________________________________
> > syslog-ng maillist - syslog-ng@lists.balabit.hu
> > http://lists.balabit.hu/mailman/listinfo/syslog-ng
> >
> > _______________________________________________
> > syslog-ng maillist - syslog-ng@lists.balabit.hu
> > http://lists.balabit.hu/mailman/listinfo/syslog-ng
> >
>
> --__--__--
>
> Message: 4
> From: "Lowkrantz, Goran" <Goran.Lowkrantz@infologigruppen.se>
> To: "'syslog-ng@venus.terrasoft.hu'" <syslog-ng@venus.terrasoft.hu>
> Subject: RE: [syslog-ng] syslog-ng 1.3.3
> Date: Tue, 23 Nov 1999 01:18:52 +0100
> charset="windows-1252"
> Reply-To: syslog-ng@lists.balabit.hu
>
> Ok, I installed scsh but still get
>
> make: don't know how to make afsocket.h.x. Stop
> *** Error code 1
>
> Cheers,
> GLZ
>
> -----Original Message-----
> From: Chris Scheller [mailto:schelcj@networkone.net]
> Sent: Monday, November 22, 1999 11:26 PM
> To: 'syslog-ng@venus.terrasoft.hu'
> Subject: RE: [syslog-ng] syslog-ng 1.3.3
>
> I had the same problem and was told to install scsh. i did so and compile
> worked great. scsh can be found at
> ftp-swiss.ai.mit.edu/pub/su/scsh/scsh.tar.gz
>
> Chris Scheller
> Network One Internet, inc.
> http://www.networkone.net/
> System/Network Administration
> 1.888.GOT-NET1
>
> On Mon, 22 Nov 1999, Lowkrantz, Goran wrote:
>
> > Hi,
> >
> > I downloaded 1.3.3 but the file src/afsocket.h.x seems to be missing, so
> it
> > won't build.
> >
> > Cheers,
> > GLZ
> >
> > -----Original Message-----
> > From: Balazs Scheidler [mailto:bazsi@balabit.hu]
> > Sent: Monday, November 22, 1999 10:11 PM
> > To: syslog-ng@lists.balabit.hu
> > Subject: [syslog-ng] syslog-ng 1.3.3
> >
> >
> > Hi,
> >
> > I've released syslog-ng 1.3.3, which completes the afsocket reorganization
> I
> > introduced in 1.3.2. It should be quite stable now.
> >
> > This fixes a problem with some programs dropping messages (for instance
> > sendmail). It was caused by the fact the syslog-ng dropped all af_unix
> > connections when sent a HUP signal. A new option was added to unix-stream
> > and tcp: keep-alive, which is on by default for unix-stream drivers.
> >
> > Another bug was fixed in the $DAY macro expansion.
> >
> > There was a discussion recently on bugtraq about a syslogd DoS attack. The
> > problem is fixed in distributions by switching to unix-dgram sockets from
> > unix-stream. syslog-ng supports this switch by using another driver, so
> you
> > only need to change your configuration.
> >
> > An alternative solution will be provided to limit the number of
> simultaneous
> > connections kept open. If this limit is reached, syslog-ng will be able to
> > send a warning message, and messages will not be simply dropped. IMHO this
> > solution is much better, than reverting to sock_dgram.
> >
> > --
> > Bazsi
> > PGP info: KeyID 9AF8D0A9 Fingerprint CD27 CFB0 802C 0944 9CFD 804E C82C
> 8EB1
> > url: http://www.balabit.hu/pgpkey.txt
> >
> > _______________________________________________
> > syslog-ng maillist - syslog-ng@lists.balabit.hu
> > http://lists.balabit.hu/mailman/listinfo/syslog-ng
> >
> > _______________________________________________
> > syslog-ng maillist - syslog-ng@lists.balabit.hu
> > http://lists.balabit.hu/mailman/listinfo/syslog-ng
> >
>
> _______________________________________________
> syslog-ng maillist - syslog-ng@lists.balabit.hu
> http://lists.balabit.hu/mailman/listinfo/syslog-ng
>
> --__--__--
>
> Message: 5
> Date: Mon, 22 Nov 1999 16:44:54 -0800 (PST)
> From: Chris Scheller <schelcj@networkone.net>
> To: syslog-ng@venus.terrasoft.hu
> cc: syslog-ng@lists.balabit.hu
> Subject: Re: [syslog-ng] syslog-ng 1.3.3
> Reply-To: syslog-ng@lists.balabit.hu
>
> Is it possible ( and i just missed it ) to do a destination like this
> destination test { file("/var/log/syslog-ng/$YEAR/$MONTH/$HOST-$DAY"); };
> using the macros to create directories?
>
> Chris Scheller
> Network One Internet, inc.
> http://www.networkone.net/
> System/Network Administration
> 1.888.GOT-NET1
>
> On Mon, 22 Nov 1999, Balazs Scheidler wrote:
>
> > Hi,
> >
> > I've released syslog-ng 1.3.3, which completes the afsocket reorganization I
> > introduced in 1.3.2. It should be quite stable now.
> >
> > This fixes a problem with some programs dropping messages (for instance
> > sendmail). It was caused by the fact the syslog-ng dropped all af_unix
> > connections when sent a HUP signal. A new option was added to unix-stream
> > and tcp: keep-alive, which is on by default for unix-stream drivers.
> >
> > Another bug was fixed in the $DAY macro expansion.
> >
> > There was a discussion recently on bugtraq about a syslogd DoS attack. The
> > problem is fixed in distributions by switching to unix-dgram sockets from
> > unix-stream. syslog-ng supports this switch by using another driver, so you
> > only need to change your configuration.
> >
> > An alternative solution will be provided to limit the number of simultaneous
> > connections kept open. If this limit is reached, syslog-ng will be able to
> > send a warning message, and messages will not be simply dropped. IMHO this
> > solution is much better, than reverting to sock_dgram.
> >
> > --
> > Bazsi
> > PGP info: KeyID 9AF8D0A9 Fingerprint CD27 CFB0 802C 0944 9CFD 804E C82C 8EB1
> > url: http://www.balabit.hu/pgpkey.txt
> >
> > _______________________________________________
> > syslog-ng maillist - syslog-ng@lists.balabit.hu
> > http://lists.balabit.hu/mailman/listinfo/syslog-ng
> >
>
> --__--__--
>
> Message: 6
> Date: Mon, 22 Nov 1999 16:44:54 -0800 (PST)
> From: Chris Scheller <schelcj@networkone.net>
> To: syslog-ng@venus.terrasoft.hu
> cc: syslog-ng@lists.balabit.hu
> Subject: Re: [syslog-ng] syslog-ng 1.3.3
> Reply-To: syslog-ng@lists.balabit.hu
>
> Is it possible ( and i just missed it ) to do a destination like this
> destination test { file("/var/log/syslog-ng/$YEAR/$MONTH/$HOST-$DAY"); };
> using the macros to create directories?
>
> Chris Scheller
> Network One Internet, inc.
> http://www.networkone.net/
> System/Network Administration
> 1.888.GOT-NET1
>
> On Mon, 22 Nov 1999, Balazs Scheidler wrote:
>
> > Hi,
> >
> > I've released syslog-ng 1.3.3, which completes the afsocket reorganization I
> > introduced in 1.3.2. It should be quite stable now.
> >
> > This fixes a problem with some programs dropping messages (for instance
> > sendmail). It was caused by the fact the syslog-ng dropped all af_unix
> > connections when sent a HUP signal. A new option was added to unix-stream
> > and tcp: keep-alive, which is on by default for unix-stream drivers.
> >
> > Another bug was fixed in the $DAY macro expansion.
> >
> > There was a discussion recently on bugtraq about a syslogd DoS attack. The
> > problem is fixed in distributions by switching to unix-dgram sockets from
> > unix-stream. syslog-ng supports this switch by using another driver, so you
> > only need to change your configuration.
> >
> > An alternative solution will be provided to limit the number of simultaneous
> > connections kept open. If this limit is reached, syslog-ng will be able to
> > send a warning message, and messages will not be simply dropped. IMHO this
> > solution is much better, than reverting to sock_dgram.
> >
> > --
> > Bazsi
> > PGP info: KeyID 9AF8D0A9 Fingerprint CD27 CFB0 802C 0944 9CFD 804E C82C 8EB1
> > url: http://www.balabit.hu/pgpkey.txt
> >
> > _______________________________________________
> > syslog-ng maillist - syslog-ng@lists.balabit.hu
> > http://lists.balabit.hu/mailman/listinfo/syslog-ng
> >
>
> --__--__--
>
> _______________________________________________
> syslog-ng maillist - syslog-ng@lists.balabit.hu
> http://lists.balabit.hu/mailman/listinfo/syslog-ng
>
> End of syslog-ng Digest