[syslog-ng]Lost of facility/level

Jerome Peducasse peducasse@echo.fr
Tue, 16 Apr 2002 12:50:31 +0200


--envbJBWh7q8WU6mo
Content-Type: text/plain; charset=iso-8859-1
Content-Transfer-Encoding: 8bit

It seems, it occurs errors with long messages.
With this code:
KELOG_RELEASE(( LOG_ERR, \
                        "not enougth space to make result ouput! \n   varlen=%d len=%d max_len=%d \n   result is '%s'\n" WHERE,  \
                        varlen, len, max_len, result, \
                        HERE ));
messages come in user.notice instead of local0.err:

Apr 16 11:18:43 w3search1.search.fr.ke.echo [user.notice] varlen=19 varlen=19 len=2048 max_len=2048 
Apr 16 11:18:43 w3search1.search.fr.ke.echo [user.notice] result result is \'<SP TYPE=\'L\'> / 406 / Safrane / BMW sÚrie 5 145  </SP><SP TYPE=\'W\'>x</SP><SP TYPE=\'L\'> 80  </SP><SP TYPE=\'W\'>x</SP><SP TYPE=\'L\'> 13  145  </SP><SP TYPE=\'W\'>X</SP><SP TYPE=\'L\'> 13 155  </SP><SP TYPE=\'W\'>X</SP><SP TYPE=\'L\'>  </SP><SP TYPE=\'W\'>70</SP><SP TYPE=\'L\'>  </SP><SP TYPE=\'W\'>X</SP><SP TYPE=\'L\'> 13  </SP><SP TYPE=\'W\'>165</SP><SP TYPE=\'L\'>  </SP><SP TYPE=\'W\'>X</SP><SP TYPE=\'L\'>  </SP><SP TYPE=\'W\'>70</SP><SP TYPE=\'L\'>  </SP><SP TYPE=\'W\'>X</SP><SP TYPE=\'L\'> 13 175  </SP><SP TYPE=\'W\'>X</SP><SP TYPE=\'L\'>  </SP><SP TYPE=\'W\'>70</SP><SP TYPE=\'L\'>  </SP><SP TYPE=\'W\'>X</SP><SP TYPE=\'L\'> 13 185  </SP><SP TYPE=\'W\'>X</SP><SP TYPE=\'L\'>  </SP><SP TYPE=\'W\'>70</SP><SP TYPE=\'L\'>  </SP><SP TYPE=\'W\'>X</SP><SP TYPE=\'L\'> 13  </SP><SP TYPE=\'W\'>165</SP><SP TYPE=\'L\'>  </SP><SP TYPE=\'W\'>X</SP><SP TYPE=\'L\'>  </SP><SP TYPE=\'W\'>70</SP><SP TYPE=\'L\'> !
 </SP><SP TYPE=\'W\'>X</SP><SP TYPE=\'L\'>  </SP><SP TYPE=\'W\'>14<131>Apr 16 11:18:43 w3search[2495]: not enougth space to make result ouput! 
Apr 16 11:18:43 w3search1.search.fr.ke.echo [user.notice] varlen=6 varlen=6 len=2048 max_len=2048 
Apr 16 11:18:43 w3search1.search.fr.ke.echo [user.notice]  <131>Apr 16 11:18:43 w3search[2495]: SmartPreview failed for ip=159884415 in enum echo::keret echo::ThalieClient::getDoc(uint32 &, echo::ThalieDocument *, const echo::Query &, const echo::Answer *, const char (*)[255]):ThalieClient.cc:642 



Attached file contains result output of strace.

  
Thanks

On Thu, Apr 11, 2002 at 05:56:57PM +0100, Jerome Peducasse wrote:
> On Thu, Apr 11, 2002 at 04:39:44PM +0200, Balazs Scheidler wrote:
> > On Thu, Apr 11, 2002 at 04:31:03PM +0100, Jerome Peducasse wrote:
> > > Hi,
> > > 	
> > > 	I have applied your patch since one week and I already report some errors such as:
> > > Apr 11 14:49:32 w3search3/w3search3 in void echo::AtlasClient::onRead(void *):AtlasClient.cc:427 <130>Apr 11 14:49:32 frontatlas[9192]: read Context failed on socket=6 in void echo::AtlasClient::onRead(void *):AtlasClient.cc:434 
> > > 
> > > Both embedded messages come with facility user instead of local0 (on localhost and on loghost).
> > 
> > can you strace syslog-ng (with -s <high number> specified) or tcpdump the
> > syslog traffic to see whether syslog-ng or your device is at fault?
> I don't think it's a device fault because I have 2 destinations (local and loghost) and error appears on both.
> I launch strace on some computer and I wait ...
> 
> Thanks.
> 
> -- 
> Jerome Peducasse
> 
> _______________________________________________
> syslog-ng maillist  -  syslog-ng@lists.balabit.hu
> https://lists.balabit.hu/mailman/listinfo/syslog-ng

-- 
Jerome Peducasse
Wanadoo Portails - Sophia Antipolis

--envbJBWh7q8WU6mo
Content-Type: text/plain; charset=us-ascii
Content-Disposition: attachment; filename=strace_syslog-ng

read(3, "<131>Apr 16 11:18:43 w3search[2495]: not enougth space to make result ouput! \n   varlen=19 len=2048 max_len=2048 \n   result is \'<SP TYPE=\'L\'> / 406 / Safrane / BMW s\351rie 5 145  </SP><SP TYPE=\'W\'>x</SP><SP TYPE=\'L\'> 80  </SP><SP TYPE=\'W\'>x</SP><SP TYPE=\'L\'> 13  145  </SP><SP TYPE=\'W\'>X</SP><SP TYPE=\'L\'> 13 155  </SP><SP TYPE=\'W\'>X</SP><SP TYPE=\'L\'>  </SP><SP TYPE=\'W\'>70</SP><SP TYPE=\'L\'>  </SP><SP TYPE=\'W\'>X</SP><SP TYPE=\'L\'> 13  </SP><SP TYPE=\'W\'>165</SP><SP TYPE=\'L\'>  </SP><SP TYPE=\'W\'>X</SP><SP TYPE=\'L\'>  </SP><SP TYPE=\'W\'>70</SP><SP TYPE=\'L\'>  </SP><SP TYPE=\'W\'>X</SP><SP TYPE=\'L\'> 13 175  <"..., 1024) = 1024
time(NULL)                              = 1018948723
time(NULL)                              = 1018948723
time(NULL)                              = 1018948723
time(NULL)                              = 1018948723
open("/var/log/ramasse-miettes.log", O_WRONLY|O_NONBLOCK|O_APPEND|O_CREAT|O_NOCTTY, 0600) = 14
chown("/var/log/ramasse-miettes.log", 0, 0) = 0
chmod("/var/log/ramasse-miettes.log", 0600) = 0
fcntl(14, F_GETFL)                      = 0xc01 (flags O_WRONLY|O_NONBLOCK|O_APPEND)
fcntl(14, F_SETFL, O_WRONLY|O_NONBLOCK|O_APPEND) = 0
fcntl(14, F_SETFD, FD_CLOEXEC)          = 0
open("/var/log/ramasse-miettes/user.notice", O_WRONLY|O_NONBLOCK|O_APPEND|O_CREAT|O_NOCTTY, 0600) = 15
chown("/var/log/ramasse-miettes/user.notice", 0, 0) = 0
chmod("/var/log/ramasse-miettes/user.notice", 0600) = 0
fcntl(15, F_GETFL)                      = 0xc01 (flags O_WRONLY|O_NONBLOCK|O_APPEND)
fcntl(15, F_SETFL, O_WRONLY|O_NONBLOCK|O_APPEND) = 0
fcntl(15, F_SETFD, FD_CLOEXEC)          = 0
time(NULL)                              = 1018948723
time(NULL)                              = 1018948723
time(NULL)                              = 1018948723
poll([{fd=15, events=POLLOUT, revents=POLLOUT}, {fd=14, events=POLLOUT, revents=POLLOUT}, {fd=13, events=0}, {fd=12, events=0}, {fd=11, events=0}, {fd=10, events=0}, {fd=9, events=POLLOUT, revents=POLLOUT}, {fd=4, events=0}, {fd=2, events=0}, {fd=5, events=POLLOUT, revents=POLLOUT}, {fd=6, events=POLLOUT, revents=POLLOUT}, {fd=1, events=0}, {fd=0, events=0}, {fd=3, events=POLLIN, revents=POLLIN}], 14, 100) = 6
write(15, "Apr 16 11:18:43 w3search1.search.fr.ke.echo varlen=19 len=2048 max_len=2048 \n", 77) = 77
fsync(15)                               = 0
write(14, "Apr 16 11:18:43 w3search1.search.fr.ke.echo [user.notice] varlen=19 varlen=19 len=2048 max_len=2048 \n", 101) = 101
fsync(14)                               = 0
write(9, "Apr 16 11:18:43 w3search1.search.fr.ke.echo w3search[2495]: not enougth space to make result ouput! \n", 101) = 101
write(5, "<13>Apr 16 11:18:43 w3search1.search.fr.ke.echo varlen=19 len=2048 max_len=2048 \n", 81) = 81
write(6, "<131>Apr 16 11:18:43 w3search1.search.fr.ke.echo w3search[2495]: not enougth space to make result ouput! \n", 106) = 106
read(3, "<131>Apr 16 11:18:43 w3search[2495]: not enougth space to make result ouput! \n   varlen=6 len=2048 max_len=2048 \n ", 114) = 114
time(NULL)                              = 1018948723
time(NULL)                              = 1018948723
brk(0x806e000)                          = 0x806e000
time(NULL)                              = 1018948723
time(NULL)                              = 1018948723
time(NULL)                              = 1018948723
time(NULL)                              = 1018948723
time(NULL)                              = 1018948723
poll([{fd=15, events=POLLOUT, revents=POLLOUT}, {fd=14, events=POLLOUT, revents=POLLOUT}, {fd=13, events=0}, {fd=12, events=0}, {fd=11, events=0}, {fd=10, events=0}, {fd=9, events=0}, {fd=4, events=0}, {fd=2, events=0}, {fd=5, events=POLLOUT, revents=POLLOUT}, {fd=6, events=0}, {fd=1, events=0}, {fd=0, events=0}, {fd=3, events=POLLIN, revents=POLLIN}], 14, 100) = 4
write(15, "Apr 16 11:18:43 w3search1.search.fr.ke.echo result is \'<SP TYPE=\'L\'> / 406 / Safrane / BMW s\351rie 5 145  </SP><SP TYPE=\'W\'>x</SP><SP TYPE=\'L\'> 80  </SP><SP TYPE=\'W\'>x</SP><SP TYPE=\'L\'> 13  145  </SP><SP TYPE=\'W\'>X</SP><SP TYPE=\'L\'> 13 155  </SP><SP TYPE=\'W\'>X</SP><SP TYPE=\'L\'>  </SP><SP TYPE=\'W\'>70</SP><SP TYPE=\'L\'>  </SP><SP TYPE=\'W\'>X</SP><SP TYPE=\'L\'> 13  </SP><SP TYPE=\'W\'>165</SP><SP TYPE=\'L\'>  </SP><SP TYPE=\'W\'>X</SP><SP TYPE=\'L\'>  </SP><SP TYPE=\'W\'>70</SP><SP TYPE=\'L\'>  </SP><SP TYPE=\'W\'>X</SP><SP TYPE=\'L\'> 13 175  </SP><SP TYPE=\'W\'>X</SP><SP TYPE=\'L\'>  </SP><SP TYPE=\'W\'>70</SP><SP TYPE=\'"..., 1105) = 1105
fsync(15)                               = 0
write(14, "Apr 16 11:18:43 w3search1.search.fr.ke.echo [user.notice] result result is \\\'<SP TYPE=\\\'L\\\'> / 406 / Safrane / BMW s\351rie 5 145  </SP><SP TYPE=\\\'W\\\'>x</SP><SP TYPE=\\\'L\\\'> 80  </SP><SP TYPE=\\\'W\\\'>x</SP><SP TYPE=\\\'L\\\'> 13  145  </SP><SP TYPE=\\\'W\\\'>X</SP><SP TYPE=\\\'L\\\'> 13 155  </SP><SP TYPE=\\\'W\\\'>X</SP><SP TYPE=\\\'L\\\'>  </SP><SP TYPE=\\\'W\\\'>70</SP><SP TYPE=\\\'L\\\'>  </SP><SP TYPE=\\\'W\\\'>X</SP><SP TYPE=\\\'L\\\'> 13  </SP><SP TYPE=\\\'W\\\'>165</SP><SP TYPE=\\\'L\\\'>  </SP><SP TYPE=\\\'W\\\'>X</SP><SP TYPE=\\\'L\\\'>  </SP><SP TYPE=\\\'W\\\'>70</SP><SP TYPE=\\\'L\\\'>  </SP><SP TYPE=\\\'W\\\'>X</SP><SP TYPE=\\\'L\\\'> 13 175  </SP><SP T"..., 1234) = 1234
fsync(14)                               = 0
write(5, "<13>Apr 16 11:18:43 w3search1.search.fr.ke.echo result is \'<SP TYPE=\'L\'> / 406 / Safrane / BMW s\351rie 5 145  </SP><SP TYPE=\'W\'>x</SP><SP TYPE=\'L\'> 80  </SP><SP TYPE=\'W\'>x</SP><SP TYPE=\'L\'> 13  145  </SP><SP TYPE=\'W\'>X</SP><SP TYPE=\'L\'> 13 155  </SP><SP TYPE=\'W\'>X</SP><SP TYPE=\'L\'>  </SP><SP TYPE=\'W\'>70</SP><SP TYPE=\'L\'>  </SP><SP TYPE=\'W\'>X</SP><SP TYPE=\'L\'> 13  </SP><SP TYPE=\'W\'>165</SP><SP TYPE=\'L\'>  </SP><SP TYPE=\'W\'>X</SP><SP TYPE=\'L\'>  </SP><SP TYPE=\'W\'>70</SP><SP TYPE=\'L\'>  </SP><SP TYPE=\'W\'>X</SP><SP TYPE=\'L\'> 13 175  </SP><SP TYPE=\'W\'>X</SP><SP TYPE=\'L\'>  </SP><SP TYPE=\'W\'>70</SP><SP TY"..., 1113) = 1113
read(3, "<131>Apr 16 11:18:43 w3search[2495]: SmartPreview failed for ip=159884415 in enum echo::keret echo::ThalieClient::getDoc(uint32 &, echo::ThalieDocument *, const echo::Query &, const echo::Answer *, const char (*)[255]):ThalieClient.cc:642 ", 1023) = 239
time(NULL)                              = 1018948723
time(NULL)                              = 1018948723
time(NULL)                              = 1018948723
time(NULL)                              = 1018948723
poll([{fd=15, events=POLLOUT, revents=POLLOUT}, {fd=14, events=POLLOUT, revents=POLLOUT}, {fd=13, events=0}, {fd=12, events=0}, {fd=11, events=0}, {fd=10, events=0}, {fd=9, events=0}, {fd=4, events=0}, {fd=2, events=0}, {fd=5, events=POLLOUT, revents=POLLOUT}, {fd=6, events=0}, {fd=1, events=0}, {fd=0, events=0}, {fd=3, events=POLLIN}], 14, 100) = 3
write(15, "Apr 16 11:18:43 w3search1.search.fr.ke.echo <131>Apr 16 11:18:43 w3search[2495]: SmartPreview failed for ip=159884415 in enum echo::keret echo::ThalieClient::getDoc(uint32 &, echo::ThalieDocument *, const echo::Query &, const echo::Answer *, const char (*)[255]):ThalieClient.cc:642 \n", 284) = 284
fsync(15)                               = 0
write(14, "Apr 16 11:18:43 w3search1.search.fr.ke.echo [user.notice]  <131>Apr 16 11:18:43 w3search[2495]: SmartPreview failed for ip=159884415 in enum echo::keret echo::ThalieClient::getDoc(uint32 &, echo::ThalieDocument *, const echo::Query &, const echo::Answer *, const char (*)[255]):ThalieClient.cc:642 \n", 299) = 299
fsync(14)                               = 0
write(5, "<13>Apr 16 11:18:43 w3search1.search.fr.ke.echo <131>Apr 16 11:18:43 w3search[2495]: SmartPreview failed for ip=159884415 in enum echo::keret echo::ThalieClient::getDoc(uint32 &, echo::ThalieDocument *, const echo::Query &, const echo::Answer *, const char (*)[255]):ThalieClient.cc:642 \n", 288) = 288
time(NULL)                              = 1018948723
poll([{fd=15, events=0}, {fd=14, events=0}, {fd=13, events=0}, {fd=12, events=0}, {fd=11, events=0}, {fd=10, events=0}, {fd=9, events=0}, {fd=4, events=0}, {fd=2, events=0}, {fd=5, events=0}, {fd=6, events=0}, {fd=1, events=0}, {fd=0, events=0}, {fd=3, events=POLLIN}], 14, 100) = 0
poll([{fd=15, events=0}, {fd=14, events=0}, {fd=13, events=0}, {fd=12, events=0}, {fd=11, events=0}, {fd=10, events=0}, {fd=9, events=0}, {fd=4, events=0}, {fd=2, events=0}, {fd=5, events=0}, {fd=6, events=0}, {fd=1, events=0}, {fd=0, events=0}, {fd=3, events=POLLIN, revents=POLLIN}], 14, 27000) = 1

--envbJBWh7q8WU6mo--