[syslog-ng] Syslog-ng Dies - core dump

John Wingenbach jwing(keepitclean)@pliantsystems.com
Thu, 20 Apr 2000 15:21:39 -0400


--------------9F356614E8B9538EE9B3E030
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit

I just installed and configured syslog-ng 1.4.3 on a Solaris 2.6 system.  It
cores out on startup.  It apparently doesn't like part of my configuration.
Debug output is:

#> /opt/syslog-ng/sbin/syslog-ng -d -v
binding fd 5, inetaddr: 0.0.0.0, port: 514
io.c: Preparing fd 5 for reading
syslog-ng version 1.4.3 starting
Segmentation Fault(coredump)

My configuration is (Note below the comments regarding code which if removed
allows it to live):

source s_all { sun-streams("/dev/log" door("/etc/.syslog_door"));
               internal();
               udp();
             };

# Level Filters
filter f_info { level(info .. emerg); };
filter f_warning { level(warning .. emerg); };
filter f_debug { level(debug .. emerg); };
filter f_crit { level(crit .. emerg); };
filter f_err { level(err .. emerg); };
filter f_emerg { level(emerg); };

# Facility Filters
filter f_user { facility(user); };
filter f_mail { facility(mail); };
filter f_daemon { facility(daemon); };
filter f_auth { facility(auth); };
filter f_lpr { facility(lpr); };
filter f_news { facility(news); };
filter f_kern { facility(kern); };
filter f_uucp { facility(uucp); };
filter f_cron { facility(cron); };
filter f_local0 { facility(local0); };
filter f_local1 { facility(local1); };
filter f_local2 { facility(local2); };
filter f_local3 { facility(local3); };
filter f_local4 { facility(local4); };
filter f_local5 { facility(local5); };
filter f_local6 { facility(local6); };
filter f_local7 { facility(local7); };

# Complex Filters
filter f_mailerror { filter (f_mail) and filter (f_err); };
filter f_axsyslog {
  filter (f_info)
  or filter(f_mailerror);
};

------
It would seem that the following filters used to build a summary syslog cause
the problem.
------

filter f_errsanuser { filter (f_err) and not facility(user); };
filter f_kerndebug { filter (f_kern) and filter (f_debug); };
filter f_mailwarning { filter (f_mail) and filter (f_warning); };
filter f_summary {
  filter (f_errsanuser)
  or filter (f_kerndebug)
  or filter (f_daemon)
  or filter (f_mailwarning);
};

destination d_all { file("/var/log/messages"); };
destination d_ttys { usertty("*"); };
destination d_console { file ("/dev/console"); };
destination d_kernfile { file ("/var/log/kern"); };
destination d_syslogfile { file ("/var/log/syslog"); };
destination d_userfile { file ("/var/log/user"); };
destination d_mailfile { file ("/var/log/mail"); };
destination d_mailcritfile { file ("/var/log/mail.crit"); };
destination d_mailwarnfile { file ("/var/log/mail.warning"); };
destination d_daemonfile { file ("/var/log/daemon"); };
destination d_daemonwarningfile { file ("/var/log/daemon.warning"); };
destination d_authfile { file ("/var/log/auth"); };
destination d_lprfile { file ("/var/log/lpr"); };
destination d_newsfile { file ("/var/log/news"); };
destination d_uucpfile { file ("/var/log/uucp"); };
destination d_cronfile { file ("/var/log/cron"); };
destination d_local0file { file ("/var/log/local0"); };
destination d_local1file { file ("/var/log/local1"); };
destination d_local2file { file ("/var/log/local2"); };
destination d_local3file { file ("/var/log/local3"); };
destination d_local4file { file ("/var/log/local4"); };
destination d_local5file { file ("/var/log/local5"); };
destination d_local6file { file ("/var/log/local6"); };
destination d_local7file { file ("/var/log/local7"); };

destination d_axentsyslog { file ("/axent/ita/system/falcon/syslog"); };
destination d_axentmail { file ("/axent/ita/system/falcon/syslog.mdbg"); };

log { source(s_all); filter (f_kern); filter (f_debug); destination
(d_kernfile); };
log { source(s_all); filter (f_user); filter (f_debug); destination
(d_userfile); };
log { source(s_all); filter (f_mail); filter (f_debug); destination
(d_mailfile); };
log { source(s_all); filter (f_mail); filter (f_crit); destination
(d_mailcritfile); };
log { source(s_all); filter (f_mail); filter (f_warning); destination
(d_mailwarnfile); };
log { source(s_all); filter (f_daemon); filter (f_debug); destination
(d_daemonfile); };
log { source(s_all); filter (f_daemon); filter (f_warning); destination
(d_daemonwarningfile); };
log { source(s_all); filter (f_auth); filter (f_debug); destination
(d_authfile); };
log { source(s_all); filter (f_lpr); filter (f_debug); destination (d_lprfile);
};
log { source(s_all); filter (f_news); filter (f_debug); destination
(d_newsfile); };
log { source(s_all); filter (f_uucp); filter (f_debug); destination
(d_uucpfile); };
log { source(s_all); filter (f_cron); filter (f_debug); destination
(d_cronfile); };
log { source(s_all); filter (f_local0); destination (d_local0file); };
log { source(s_all); filter (f_local1); filter (f_debug); destination
(d_local1file); };
log { source(s_all); filter (f_local2); destination (d_local2file); };
log { source(s_all); filter (f_local3); destination (d_local3file); };
log { source(s_all); filter (f_local4); filter (f_debug); destination
(d_local4file); };
log { source(s_all); filter (f_local5); filter (f_debug); destination
(d_local5file); };
log { source(s_all); filter (f_local6); filter (f_debug); destination
(d_local6file); };
log { source(s_all); filter (f_local7); filter (f_debug); destination
(d_local7file); };

log { source(s_all); filter (f_axsyslog); destination (d_axentsyslog); };
log { source(s_all); filter (f_mail); filter (f_debug); destination
(d_axentmail); };

log { source(s_all); filter (f_summary); destination (d_syslogfile); };


--
John C. Wingenbach
Pliant Systems, Inc.
Sr. Systems Administrator
Work: (919) 405-4627
Fax:  (919) 405-4544



--------------9F356614E8B9538EE9B3E030
Content-Type: text/html; charset=us-ascii
Content-Transfer-Encoding: 7bit

<!doctype html public "-//w3c//dtd html 4.0 transitional//en">
I just installed and configured syslog-ng 1.4.3 on a Solaris 2.6 system. 
It cores out on startup.  It apparently doesn't like part of my configuration. 
Debug output is:

#> /opt/syslog-ng/sbin/syslog-ng -d -v
binding fd 5, inetaddr: 0.0.0.0, port: 514
io.c: Preparing fd 5 for reading
syslog-ng version 1.4.3 starting
Segmentation Fault(coredump)

My configuration is (Note below the comments regarding code which if removed allows it to live):

source s_all { sun-streams("/dev/log" door("/etc/.syslog_door"));
               internal();
               udp();
             };

# Level Filters
filter f_info { level(info .. emerg); };
filter f_warning { level(warning .. emerg); };
filter f_debug { level(debug .. emerg); };
filter f_crit { level(crit .. emerg); };
filter f_err { level(err .. emerg); };
filter f_emerg { level(emerg); };

# Facility Filters
filter f_user { facility(user); };
filter f_mail { facility(mail); };
filter f_daemon { facility(daemon); };
filter f_auth { facility(auth); };
filter f_lpr { facility(lpr); };
filter f_news { facility(news); };
filter f_kern { facility(kern); };
filter f_uucp { facility(uucp); };
filter f_cron { facility(cron); };
filter f_local0 { facility(local0); };
filter f_local1 { facility(local1); };
filter f_local2 { facility(local2); };
filter f_local3 { facility(local3); };
filter f_local4 { facility(local4); };
filter f_local5 { facility(local5); };
filter f_local6 { facility(local6); };
filter f_local7 { facility(local7); };

# Complex Filters
filter f_mailerror { filter (f_mail) and filter (f_err); };
filter f_axsyslog {
  filter (f_info)
  or filter(f_mailerror);
};

------
It would seem that the following filters used to build a summary syslog cause the problem.
------

filter f_errsanuser { filter (f_err) and not facility(user); };
filter f_kerndebug { filter (f_kern) and filter (f_debug); };
filter f_mailwarning { filter (f_mail) and filter (f_warning); };
filter f_summary {
  filter (f_errsanuser)
  or filter (f_kerndebug)
  or filter (f_daemon)
  or filter (f_mailwarning);
};

destination d_all { file("/var/log/messages"); };
destination d_ttys { usertty("*"); };
destination d_console { file ("/dev/console"); };
destination d_kernfile { file ("/var/log/kern"); };
destination d_syslogfile { file ("/var/log/syslog"); };
destination d_userfile { file ("/var/log/user"); };
destination d_mailfile { file ("/var/log/mail"); };
destination d_mailcritfile { file ("/var/log/mail.crit"); };
destination d_mailwarnfile { file ("/var/log/mail.warning"); };
destination d_daemonfile { file ("/var/log/daemon"); };
destination d_daemonwarningfile { file ("/var/log/daemon.warning"); };
destination d_authfile { file ("/var/log/auth"); };
destination d_lprfile { file ("/var/log/lpr"); };
destination d_newsfile { file ("/var/log/news"); };
destination d_uucpfile { file ("/var/log/uucp"); };
destination d_cronfile { file ("/var/log/cron"); };
destination d_local0file { file ("/var/log/local0"); };
destination d_local1file { file ("/var/log/local1"); };
destination d_local2file { file ("/var/log/local2"); };
destination d_local3file { file ("/var/log/local3"); };
destination d_local4file { file ("/var/log/local4"); };
destination d_local5file { file ("/var/log/local5"); };
destination d_local6file { file ("/var/log/local6"); };
destination d_local7file { file ("/var/log/local7"); };

destination d_axentsyslog { file ("/axent/ita/system/falcon/syslog"); };
destination d_axentmail { file ("/axent/ita/system/falcon/syslog.mdbg"); };

log { source(s_all); filter (f_kern); filter (f_debug); destination (d_kernfile); };
log { source(s_all); filter (f_user); filter (f_debug); destination (d_userfile); };
log { source(s_all); filter (f_mail); filter (f_debug); destination (d_mailfile); };
log { source(s_all); filter (f_mail); filter (f_crit); destination (d_mailcritfile); };
log { source(s_all); filter (f_mail); filter (f_warning); destination (d_mailwarnfile); };
log { source(s_all); filter (f_daemon); filter (f_debug); destination (d_daemonfile); };
log { source(s_all); filter (f_daemon); filter (f_warning); destination (d_daemonwarningfile); };
log { source(s_all); filter (f_auth); filter (f_debug); destination (d_authfile); };
log { source(s_all); filter (f_lpr); filter (f_debug); destination (d_lprfile); };
log { source(s_all); filter (f_news); filter (f_debug); destination (d_newsfile); };
log { source(s_all); filter (f_uucp); filter (f_debug); destination (d_uucpfile); };
log { source(s_all); filter (f_cron); filter (f_debug); destination (d_cronfile); };
log { source(s_all); filter (f_local0); destination (d_local0file); };
log { source(s_all); filter (f_local1); filter (f_debug); destination (d_local1file); };
log { source(s_all); filter (f_local2); destination (d_local2file); };
log { source(s_all); filter (f_local3); destination (d_local3file); };
log { source(s_all); filter (f_local4); filter (f_debug); destination (d_local4file); };
log { source(s_all); filter (f_local5); filter (f_debug); destination (d_local5file); };
log { source(s_all); filter (f_local6); filter (f_debug); destination (d_local6file); };
log { source(s_all); filter (f_local7); filter (f_debug); destination (d_local7file); };

log { source(s_all); filter (f_axsyslog); destination (d_axentsyslog); };
log { source(s_all); filter (f_mail); filter (f_debug); destination (d_axentmail); };

log { source(s_all); filter (f_summary); destination (d_syslogfile); };
 

--
John C. Wingenbach
Pliant Systems, Inc.
Sr. Systems Administrator
Work: (919) 405-4627
Fax:  (919) 405-4544
  --------------9F356614E8B9538EE9B3E030--