[syslog-ng] Re: syslog-ng digest, Vol 1 #109 - 6 msgs

Christopher James THOMPSON [email protected]
Tue, 23 Nov 1999 19:03:36 +1100


Hi syslog-ng

Anyone had any luck getting scsh  ???
I ran 'site idle 7200' and still get timeouts !!!

> get scsh-0.5.1.tar.gz

Receiving file: scsh-0.5.1.tar.gz
      0                                              1468685 bytes. ETA: --:--Er
ror: Error occurred during read!
Reason: Connection timed out
** Aborting Transfer **
Transfer aborted. Data connection closed.
  0%  0 >                                            1468685 bytes. ETA:769:55
scsh-0.5.1.tar.gz:  1448 bytes received in 45.61 seconds, 31.75 Bytes/s.
ftp-swiss.ai.mit.edu                                                /pub/su/scsh
ftp-swiss>


Kind Regards
Chris Thompson

[email protected] wrote:

> Send syslog-ng mailing list submissions to
>         [email protected]
>
> To subscribe or unsubscribe via the web, visit
>         http://lists.balabit.hu/mailman/listinfo/syslog-ng
> or, via email, send a message with subject or body 'help' to
>         [email protected]
> You can reach the person managing the list at
>         [email protected]
>
> When replying, please edit your Subject line so it is more specific than
> "Re: Contents of syslog-ng digest..."
>
> Today's Topics:
>
>   1. syslog-ng 1.3.3 (Balazs Scheidler)
>   2. RE: syslog-ng 1.3.3 (Lowkrantz, Goran)
>   3. RE: syslog-ng 1.3.3 (Chris Scheller)
>   4. RE: syslog-ng 1.3.3 (Lowkrantz, Goran)
>   5. Re: syslog-ng 1.3.3 (Chris Scheller)
>   6. Re: syslog-ng 1.3.3 (Chris Scheller)
>
> --__--__--
>
> Message: 1
> Date: Mon, 22 Nov 1999 22:11:14 +0100
> From: Balazs Scheidler <[email protected]>
> To: [email protected]
> Subject: [syslog-ng] syslog-ng 1.3.3
> Reply-To: [email protected]
>
> Hi,
>
> I've released syslog-ng 1.3.3, which completes the afsocket reorganization I
> introduced in 1.3.2. It should be quite stable now.
>
> This fixes a problem with some programs dropping messages (for instance
> sendmail). It was caused by the fact the syslog-ng dropped all af_unix
> connections when sent a HUP signal. A new option was added to unix-stream
> and tcp: keep-alive, which is on by default for unix-stream drivers.
>
> Another bug was fixed in the $DAY macro expansion.
>
> There was a discussion recently on bugtraq about a syslogd DoS attack. The
> problem is fixed in distributions by switching to unix-dgram sockets from
> unix-stream. syslog-ng supports this switch by using another driver, so you
> only need to change your configuration.
>
> An alternative solution will be provided to limit the number of simultaneous
> connections kept open. If this limit is reached, syslog-ng will be able to
> send a warning message, and messages will not be simply dropped. IMHO this
> solution is much better, than reverting to sock_dgram.
>
> --
> Bazsi
> PGP info: KeyID 9AF8D0A9 Fingerprint CD27 CFB0 802C 0944 9CFD 804E C82C 8EB1
>      url: http://www.balabit.hu/pgpkey.txt
>
> --__--__--
>
> Message: 2
> From: "Lowkrantz, Goran" <[email protected]>
> To: "'[email protected]'" <[email protected]>
> Subject: RE: [syslog-ng] syslog-ng 1.3.3
> Date: Mon, 22 Nov 1999 22:48:14 +0100
> charset="windows-1252"
> Reply-To: [email protected]
>
> Hi,
>
> I downloaded 1.3.3 but the file src/afsocket.h.x seems to be missing, so it
> won't build.
>
> Cheers,
>         GLZ
>
> -----Original Message-----
> From: Balazs Scheidler [mailto:[email protected]]
> Sent: Monday, November 22, 1999 10:11 PM
> To: [email protected]
> Subject: [syslog-ng] syslog-ng 1.3.3
>
> Hi,
>
> I've released syslog-ng 1.3.3, which completes the afsocket reorganization I
> introduced in 1.3.2. It should be quite stable now.
>
> This fixes a problem with some programs dropping messages (for instance
> sendmail). It was caused by the fact the syslog-ng dropped all af_unix
> connections when sent a HUP signal. A new option was added to unix-stream
> and tcp: keep-alive, which is on by default for unix-stream drivers.
>
> Another bug was fixed in the $DAY macro expansion.
>
> There was a discussion recently on bugtraq about a syslogd DoS attack. The
> problem is fixed in distributions by switching to unix-dgram sockets from
> unix-stream. syslog-ng supports this switch by using another driver, so you
> only need to change your configuration.
>
> An alternative solution will be provided to limit the number of simultaneous
> connections kept open. If this limit is reached, syslog-ng will be able to
> send a warning message, and messages will not be simply dropped. IMHO this
> solution is much better, than reverting to sock_dgram.
>
> --
> Bazsi
> PGP info: KeyID 9AF8D0A9 Fingerprint CD27 CFB0 802C 0944 9CFD 804E C82C 8EB1
>      url: http://www.balabit.hu/pgpkey.txt
>
> _______________________________________________
> syslog-ng maillist  -  [email protected]
> http://lists.balabit.hu/mailman/listinfo/syslog-ng
>
> --__--__--
>
> Message: 3
> Date: Mon, 22 Nov 1999 14:26:27 -0800 (PST)
> From: Chris Scheller <[email protected]>
> To: "'[email protected]'" <[email protected]>
> Subject: RE: [syslog-ng] syslog-ng 1.3.3
> Reply-To: [email protected]
>
> I had the same problem and was told to install scsh. i did so and compile
> worked great. scsh can be found at
> ftp-swiss.ai.mit.edu/pub/su/scsh/scsh.tar.gz
>
> Chris Scheller
> Network One Internet, inc.
> http://www.networkone.net/
> System/Network Administration
> 1.888.GOT-NET1
>
> On Mon, 22 Nov 1999, Lowkrantz, Goran wrote:
>
> > Hi,
> >
> > I downloaded 1.3.3 but the file src/afsocket.h.x seems to be missing, so it
> > won't build.
> >
> > Cheers,
> >       GLZ
> >
> > -----Original Message-----
> > From: Balazs Scheidler [mailto:[email protected]]
> > Sent: Monday, November 22, 1999 10:11 PM
> > To: [email protected]
> > Subject: [syslog-ng] syslog-ng 1.3.3
> >
> >
> > Hi,
> >
> > I've released syslog-ng 1.3.3, which completes the afsocket reorganization I
> > introduced in 1.3.2. It should be quite stable now.
> >
> > This fixes a problem with some programs dropping messages (for instance
> > sendmail). It was caused by the fact the syslog-ng dropped all af_unix
> > connections when sent a HUP signal. A new option was added to unix-stream
> > and tcp: keep-alive, which is on by default for unix-stream drivers.
> >
> > Another bug was fixed in the $DAY macro expansion.
> >
> > There was a discussion recently on bugtraq about a syslogd DoS attack. The
> > problem is fixed in distributions by switching to unix-dgram sockets from
> > unix-stream. syslog-ng supports this switch by using another driver, so you
> > only need to change your configuration.
> >
> > An alternative solution will be provided to limit the number of simultaneous
> > connections kept open. If this limit is reached, syslog-ng will be able to
> > send a warning message, and messages will not be simply dropped. IMHO this
> > solution is much better, than reverting to sock_dgram.
> >
> > --
> > Bazsi
> > PGP info: KeyID 9AF8D0A9 Fingerprint CD27 CFB0 802C 0944 9CFD 804E C82C 8EB1
> >      url: http://www.balabit.hu/pgpkey.txt
> >
> > _______________________________________________
> > syslog-ng maillist  -  [email protected]
> > http://lists.balabit.hu/mailman/listinfo/syslog-ng
> >
> > _______________________________________________
> > syslog-ng maillist  -  [email protected]
> > http://lists.balabit.hu/mailman/listinfo/syslog-ng
> >
>
> --__--__--
>
> Message: 4
> From: "Lowkrantz, Goran" <[email protected]>
> To: "'[email protected]'" <[email protected]>
> Subject: RE: [syslog-ng] syslog-ng 1.3.3
> Date: Tue, 23 Nov 1999 01:18:52 +0100
> charset="windows-1252"
> Reply-To: [email protected]
>
> Ok, I installed scsh but still get
>
> make: don't know how to make afsocket.h.x. Stop
> *** Error code 1
>
> Cheers,
>         GLZ
>
> -----Original Message-----
> From: Chris Scheller [mailto:[email protected]]
> Sent: Monday, November 22, 1999 11:26 PM
> To: '[email protected]'
> Subject: RE: [syslog-ng] syslog-ng 1.3.3
>
> I had the same problem and was told to install scsh. i did so and compile
> worked great. scsh can be found at
> ftp-swiss.ai.mit.edu/pub/su/scsh/scsh.tar.gz
>
> Chris Scheller
> Network One Internet, inc.
> http://www.networkone.net/
> System/Network Administration
> 1.888.GOT-NET1
>
> On Mon, 22 Nov 1999, Lowkrantz, Goran wrote:
>
> > Hi,
> >
> > I downloaded 1.3.3 but the file src/afsocket.h.x seems to be missing, so
> it
> > won't build.
> >
> > Cheers,
> >       GLZ
> >
> > -----Original Message-----
> > From: Balazs Scheidler [mailto:[email protected]]
> > Sent: Monday, November 22, 1999 10:11 PM
> > To: [email protected]
> > Subject: [syslog-ng] syslog-ng 1.3.3
> >
> >
> > Hi,
> >
> > I've released syslog-ng 1.3.3, which completes the afsocket reorganization
> I
> > introduced in 1.3.2. It should be quite stable now.
> >
> > This fixes a problem with some programs dropping messages (for instance
> > sendmail). It was caused by the fact the syslog-ng dropped all af_unix
> > connections when sent a HUP signal. A new option was added to unix-stream
> > and tcp: keep-alive, which is on by default for unix-stream drivers.
> >
> > Another bug was fixed in the $DAY macro expansion.
> >
> > There was a discussion recently on bugtraq about a syslogd DoS attack. The
> > problem is fixed in distributions by switching to unix-dgram sockets from
> > unix-stream. syslog-ng supports this switch by using another driver, so
> you
> > only need to change your configuration.
> >
> > An alternative solution will be provided to limit the number of
> simultaneous
> > connections kept open. If this limit is reached, syslog-ng will be able to
> > send a warning message, and messages will not be simply dropped. IMHO this
> > solution is much better, than reverting to sock_dgram.
> >
> > --
> > Bazsi
> > PGP info: KeyID 9AF8D0A9 Fingerprint CD27 CFB0 802C 0944 9CFD 804E C82C
> 8EB1
> >      url: http://www.balabit.hu/pgpkey.txt
> >
> > _______________________________________________
> > syslog-ng maillist  -  [email protected]
> > http://lists.balabit.hu/mailman/listinfo/syslog-ng
> >
> > _______________________________________________
> > syslog-ng maillist  -  [email protected]
> > http://lists.balabit.hu/mailman/listinfo/syslog-ng
> >
>
> _______________________________________________
> syslog-ng maillist  -  [email protected]
> http://lists.balabit.hu/mailman/listinfo/syslog-ng
>
> --__--__--
>
> Message: 5
> Date: Mon, 22 Nov 1999 16:44:54 -0800 (PST)
> From: Chris Scheller <[email protected]>
> To: [email protected]
> cc: [email protected]
> Subject: Re: [syslog-ng] syslog-ng 1.3.3
> Reply-To: [email protected]
>
> Is it possible ( and i just missed it ) to do a destination like this
> destination test { file("/var/log/syslog-ng/$YEAR/$MONTH/$HOST-$DAY"); };
> using the macros to create directories?
>
> Chris Scheller
> Network One Internet, inc.
> http://www.networkone.net/
> System/Network Administration
> 1.888.GOT-NET1
>
> On Mon, 22 Nov 1999, Balazs Scheidler wrote:
>
> > Hi,
> >
> > I've released syslog-ng 1.3.3, which completes the afsocket reorganization I
> > introduced in 1.3.2. It should be quite stable now.
> >
> > This fixes a problem with some programs dropping messages (for instance
> > sendmail). It was caused by the fact the syslog-ng dropped all af_unix
> > connections when sent a HUP signal. A new option was added to unix-stream
> > and tcp: keep-alive, which is on by default for unix-stream drivers.
> >
> > Another bug was fixed in the $DAY macro expansion.
> >
> > There was a discussion recently on bugtraq about a syslogd DoS attack. The
> > problem is fixed in distributions by switching to unix-dgram sockets from
> > unix-stream. syslog-ng supports this switch by using another driver, so you
> > only need to change your configuration.
> >
> > An alternative solution will be provided to limit the number of simultaneous
> > connections kept open. If this limit is reached, syslog-ng will be able to
> > send a warning message, and messages will not be simply dropped. IMHO this
> > solution is much better, than reverting to sock_dgram.
> >
> > --
> > Bazsi
> > PGP info: KeyID 9AF8D0A9 Fingerprint CD27 CFB0 802C 0944 9CFD 804E C82C 8EB1
> >      url: http://www.balabit.hu/pgpkey.txt
> >
> > _______________________________________________
> > syslog-ng maillist  -  [email protected]
> > http://lists.balabit.hu/mailman/listinfo/syslog-ng
> >
>
> --__--__--
>
> Message: 6
> Date: Mon, 22 Nov 1999 16:44:54 -0800 (PST)
> From: Chris Scheller <[email protected]>
> To: [email protected]
> cc: [email protected]
> Subject: Re: [syslog-ng] syslog-ng 1.3.3
> Reply-To: [email protected]
>
> Is it possible ( and i just missed it ) to do a destination like this
> destination test { file("/var/log/syslog-ng/$YEAR/$MONTH/$HOST-$DAY"); };
> using the macros to create directories?
>
> Chris Scheller
> Network One Internet, inc.
> http://www.networkone.net/
> System/Network Administration
> 1.888.GOT-NET1
>
> On Mon, 22 Nov 1999, Balazs Scheidler wrote:
>
> > Hi,
> >
> > I've released syslog-ng 1.3.3, which completes the afsocket reorganization I
> > introduced in 1.3.2. It should be quite stable now.
> >
> > This fixes a problem with some programs dropping messages (for instance
> > sendmail). It was caused by the fact the syslog-ng dropped all af_unix
> > connections when sent a HUP signal. A new option was added to unix-stream
> > and tcp: keep-alive, which is on by default for unix-stream drivers.
> >
> > Another bug was fixed in the $DAY macro expansion.
> >
> > There was a discussion recently on bugtraq about a syslogd DoS attack. The
> > problem is fixed in distributions by switching to unix-dgram sockets from
> > unix-stream. syslog-ng supports this switch by using another driver, so you
> > only need to change your configuration.
> >
> > An alternative solution will be provided to limit the number of simultaneous
> > connections kept open. If this limit is reached, syslog-ng will be able to
> > send a warning message, and messages will not be simply dropped. IMHO this
> > solution is much better, than reverting to sock_dgram.
> >
> > --
> > Bazsi
> > PGP info: KeyID 9AF8D0A9 Fingerprint CD27 CFB0 802C 0944 9CFD 804E C82C 8EB1
> >      url: http://www.balabit.hu/pgpkey.txt
> >
> > _______________________________________________
> > syslog-ng maillist  -  [email protected]
> > http://lists.balabit.hu/mailman/listinfo/syslog-ng
> >
>
> --__--__--
>
> _______________________________________________
> syslog-ng maillist  -  [email protected]
> http://lists.balabit.hu/mailman/listinfo/syslog-ng
>
> End of syslog-ng Digest