[syslog-ng]syslog-ng 1.5.25 released
Borzenkov Andrey
Andrey.Borzenkov@siemens.com
Wed, 22 Jan 2003 16:39:58 +0300
This is a multi-part message in MIME format.
------=_NextPart_000_0003_01C2C234.EAA4EC00
Content-Type: text/plain;
charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
>=20
> On Mon, Jan 20, 2003 at 03:41:27PM -0500, Blaise St-Laurent wrote:
> > strangely enough, i can't get this version to work for me at all. =
1.5.24
> > worked fine. I've compiled both the new syslog-ng and libol, =
installed
> (via
> > RPM) as a drop in replacement for 1.5.24, and as a result i don't =
get
> any
> > log output. reverting back to 1.5.24 restores functionality.
> >
> > Built and running on a Redhat 8.0 system. Any ideas?
>=20
> can you send me an strace output? it worked for me on a couple of =
test
> cases and Nate also uses it as this version includes the =
'bad_hostnames'
> feature he was asking for.
>=20
Confirmed on Mandrake 9.0 with glibc-2.2.5-16mdk. It simple does not =
get any
messages and sits there in poll. Strace and config attached.
-andrey
------=_NextPart_000_0003_01C2C234.EAA4EC00
Content-Type: application/octet-stream;
name="syslog-ng.strace"
Content-Transfer-Encoding: quoted-printable
Content-Disposition: attachment;
filename="syslog-ng.strace"
25772 execve("/sbin/syslog-ng", ["syslog-ng"], [/* 45 vars */]) =3D =
0=0A=
25772 uname({sys=3D"Linux", node=3D"cooker.mow.siemens.ru", ...}) =3D =
0=0A=
25772 brk(0) =3D 0x805dcc4=0A=
25772 open("/etc/ld.so.preload", O_RDONLY) =3D -1 ENOENT (No such file =
or directory)=0A=
25772 open("/etc/ld.so.cache", O_RDONLY) =3D 3=0A=
25772 fstat64(3, {st_mode=3DS_IFREG|0644, st_size=3D43111, ...}) =3D =
0=0A=
25772 old_mmap(NULL, 43111, PROT_READ, MAP_PRIVATE, 3, 0) =3D =
0x40012000=0A=
25772 close(3) =3D 0=0A=
25772 open("/lib/libresolv.so.2", O_RDONLY) =3D 3=0A=
25772 read(3, =
"\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0\3\0\1\0\0\0\260&\0"..., 1024) =3D =
1024=0A=
25772 fstat64(3, {st_mode=3DS_IFREG|0755, st_size=3D60716, ...}) =3D =
0=0A=
25772 old_mmap(NULL, 4096, PROT_READ|PROT_WRITE, =
MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) =3D 0x4001d000=0A=
25772 old_mmap(NULL, 69444, PROT_READ|PROT_EXEC, MAP_PRIVATE, 3, 0) =3D =
0x4001e000=0A=
25772 mprotect(0x4002c000, 12100, PROT_NONE) =3D 0=0A=
25772 old_mmap(0x4002c000, 4096, PROT_READ|PROT_WRITE, =
MAP_PRIVATE|MAP_FIXED, 3, 0xe000) =3D 0x4002c000=0A=
25772 old_mmap(0x4002d000, 8004, PROT_READ|PROT_WRITE, =
MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) =3D 0x4002d000=0A=
25772 close(3) =3D 0=0A=
25772 open("/lib/libnsl.so.1", O_RDONLY) =3D 3=0A=
25772 read(3, =
"\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0\3\0\1\0\0\0\200:\0"..., 1024) =3D =
1024=0A=
25772 fstat64(3, {st_mode=3DS_IFREG|0755, st_size=3D73164, ...}) =3D =
0=0A=
25772 old_mmap(NULL, 80480, PROT_READ|PROT_EXEC, MAP_PRIVATE, 3, 0) =3D =
0x4002f000=0A=
25772 mprotect(0x40040000, 10848, PROT_NONE) =3D 0=0A=
25772 old_mmap(0x40040000, 4096, PROT_READ|PROT_WRITE, =
MAP_PRIVATE|MAP_FIXED, 3, 0x11000) =3D 0x40040000=0A=
25772 old_mmap(0x40041000, 6752, PROT_READ|PROT_WRITE, =
MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) =3D 0x40041000=0A=
25772 close(3) =3D 0=0A=
25772 open("/lib/i686/libc.so.6", O_RDONLY) =3D 3=0A=
25772 read(3, =
"\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0\3\0\1\0\0\0\220\201"..., 1024) =3D =
1024=0A=
25772 fstat64(3, {st_mode=3DS_IFREG|0755, st_size=3D1167240, ...}) =3D =
0=0A=
25772 old_mmap(NULL, 1179584, PROT_READ|PROT_EXEC, MAP_PRIVATE, 3, 0) =
=3D 0x40043000=0A=
25772 mprotect(0x4015a000, 36800, PROT_NONE) =3D 0=0A=
25772 old_mmap(0x4015a000, 20480, PROT_READ|PROT_WRITE, =
MAP_PRIVATE|MAP_FIXED, 3, 0x117000) =3D 0x4015a000=0A=
25772 old_mmap(0x4015f000, 16320, PROT_READ|PROT_WRITE, =
MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) =3D 0x4015f000=0A=
25772 close(3) =3D 0=0A=
25772 munmap(0x40012000, 43111) =3D 0=0A=
25772 brk(0) =3D 0x805dcc4=0A=
25772 brk(0x805dd0c) =3D 0x805dd0c=0A=
25772 brk(0x805e000) =3D 0x805e000=0A=
25772 open("/etc/syslog-ng.conf", O_RDONLY) =3D 3=0A=
25772 brk(0x8063000) =3D 0x8063000=0A=
25772 ioctl(3, SNDCTL_TMR_TIMEBASE, 0xbffff670) =3D -1 ENOTTY =
(Inappropriate ioctl for device)=0A=
25772 fstat64(3, {st_mode=3DS_IFREG|0644, st_size=3D6615, ...}) =3D =
0=0A=
25772 mmap2(NULL, 4096, PROT_READ|PROT_WRITE, =
MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) =3D 0x40012000=0A=
25772 read(3, "# syslog-ng configuration file.\n"..., 8192) =3D 6615=0A=
25772 read(3, "", 4096) =3D 0=0A=
25772 brk(0x8064000) =3D 0x8064000=0A=
25772 brk(0x8065000) =3D 0x8065000=0A=
25772 brk(0x8066000) =3D 0x8066000=0A=
25772 read(3, "", 8192) =3D 0=0A=
25772 ioctl(3, SNDCTL_TMR_TIMEBASE, 0xbffff110) =3D -1 ENOTTY =
(Inappropriate ioctl for device)=0A=
25772 close(3) =3D 0=0A=
25772 munmap(0x40012000, 4096) =3D 0=0A=
25772 pipe([3, 4]) =3D 0=0A=
25772 fork() =3D 25773=0A=
25773 --- SIGSTOP (Stopped (signal)) ---=0A=
25773 close(3) =3D 0=0A=
25773 open("/var/run/syslog-ng.pid", O_WRONLY|O_CREAT|O_TRUNC|O_NOCTTY, =
0600) =3D 3=0A=
25773 getpid() =3D 25773=0A=
25773 write(3, "25773\n", 6) =3D 6=0A=
25773 close(3) =3D 0=0A=
25773 brk(0x806a000) =3D 0x806a000=0A=
25773 socket(PF_INET, SOCK_DGRAM, IPPROTO_UDP) =3D 3=0A=
25773 fcntl64(3, F_GETFL) =3D 0x2 (flags O_RDWR)=0A=
25773 fcntl64(3, F_SETFL, O_RDWR|O_NONBLOCK) =3D 0=0A=
25773 fcntl64(3, F_SETFD, FD_CLOEXEC) =3D 0=0A=
25773 setsockopt(3, SOL_SOCKET, SO_REUSEADDR, [1], 4) =3D 0=0A=
25773 bind(3, {sin_family=3DAF_INET, sin_port=3Dhtons(514), =
sin_addr=3Dinet_addr("0.0.0.0")}}, 16) =3D 0=0A=
25773 fcntl64(3, F_GETFL) =3D 0x802 (flags =
O_RDWR|O_NONBLOCK)=0A=
25773 fcntl64(3, F_SETFL, O_RDWR|O_NONBLOCK) =3D 0=0A=
25773 fcntl64(3, F_SETFD, FD_CLOEXEC) =3D 0=0A=
25773 brk(0x806b000) =3D 0x806b000=0A=
25773 socket(PF_UNIX, SOCK_STREAM, 0) =3D 5=0A=
25773 fcntl64(5, F_GETFL) =3D 0x2 (flags O_RDWR)=0A=
25773 fcntl64(5, F_SETFL, O_RDWR|O_NONBLOCK) =3D 0=0A=
25773 fcntl64(5, F_SETFD, FD_CLOEXEC) =3D 0=0A=
25773 stat64("/dev/log", {st_mode=3DS_IFSOCK|0755, st_size=3D0, ...}) =
=3D 0=0A=
25773 unlink("/dev/log") =3D 0=0A=
25773 bind(5, {sin_family=3DAF_UNIX, path=3D"/dev/log"}, 11) =3D 0=0A=
25773 chown32(0x8061f88, 0, 0) =3D 0=0A=
25773 chmod("/dev/log", 0666) =3D 0=0A=
25773 listen(5, 256) =3D 0=0A=
25773 open("/proc/kmsg", O_RDONLY|O_NONBLOCK|O_NOCTTY|O_LARGEFILE) =3D =
6=0A=
25773 lseek(6, 0, SEEK_END) =3D 0=0A=
25773 fcntl64(6, F_GETFL) =3D 0x8800 (flags =
O_RDONLY|O_NONBLOCK|O_LARGEFILE)=0A=
25773 fcntl64(6, F_SETFL, O_RDONLY|O_NONBLOCK|O_LARGEFILE) =3D 0=0A=
25773 fcntl64(6, F_SETFD, FD_CLOEXEC) =3D 0=0A=
25773 brk(0x806c000) =3D 0x806c000=0A=
25773 open("/dev/null", O_RDWR) =3D 7=0A=
25773 dup2(7, 0) =3D 0=0A=
25773 dup2(7, 1) =3D 1=0A=
25773 close(7) =3D 0=0A=
25773 setsid() =3D 25773=0A=
25773 write(4, "\0", 1) =3D 1=0A=
25773 close(4) =3D 0=0A=
25773 getpid() =3D 25773=0A=
25773 time(NULL) =3D 1043242600=0A=
25773 uname({sys=3D"Linux", node=3D"cooker.mow.siemens.ru", ...}) =3D =
0=0A=
25772 close(4 <unfinished ...>=0A=
25773 open("/etc/localtime", O_RDONLY <unfinished ...>=0A=
25772 <... close resumed> ) =3D 0=0A=
25773 <... open resumed> ) =3D 4=0A=
25772 read(3, <unfinished ...>=0A=
25773 fstat64(4, <unfinished ...>=0A=
25772 <... read resumed> "\0", 1) =3D 1=0A=
25773 <... fstat64 resumed> {st_mode=3DS_IFREG|0644, st_size=3D815, =
...}) =3D 0=0A=
25772 _exit(0) =3D ?=0A=
25773 mmap2(NULL, 4096, PROT_READ|PROT_WRITE, =
MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) =3D 0x40012000=0A=
25773 read(4, =
"TZif\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\f\0\0\0\f\0"..., 4096) =3D =
815=0A=
25773 close(4) =3D 0=0A=
25773 munmap(0x40012000, 4096) =3D 0=0A=
25773 open("/var/log/syslog", =
O_WRONLY|O_NONBLOCK|O_APPEND|O_CREAT|O_NOCTTY|O_LARGEFILE, 0600) =3D =
4=0A=
25773 chown32(0x8062398, 0, 0) =3D 0=0A=
25773 chmod("/var/log/syslog", 0600) =3D 0=0A=
25773 fcntl64(4, F_GETFL) =3D 0x8c01 (flags =
O_WRONLY|O_NONBLOCK|O_APPEND|O_LARGEFILE)=0A=
25773 fcntl64(4, F_SETFL, O_WRONLY|O_NONBLOCK|O_APPEND|O_LARGEFILE) =3D =
0=0A=
25773 fcntl64(4, F_SETFD, FD_CLOEXEC) =3D 0=0A=
25773 open("/var/log/messages", =
O_WRONLY|O_NONBLOCK|O_APPEND|O_CREAT|O_NOCTTY|O_LARGEFILE, 0600) =3D =
7=0A=
25773 chown32(0x8062530, 0, 0) =3D 0=0A=
25773 chmod("/var/log/messages", 0600) =3D 0=0A=
25773 fcntl64(7, F_GETFL) =3D 0x8c01 (flags =
O_WRONLY|O_NONBLOCK|O_APPEND|O_LARGEFILE)=0A=
25773 fcntl64(7, F_SETFL, O_WRONLY|O_NONBLOCK|O_APPEND|O_LARGEFILE) =3D =
0=0A=
25773 fcntl64(7, F_SETFD, FD_CLOEXEC) =3D 0=0A=
25773 rt_sigaction(SIGPIPE, {SIG_IGN}, {SIG_DFL}, 8) =3D 0=0A=
25773 rt_sigaction(SIGHUP, {0x804a3b0, [HUP], SA_RESTORER|SA_RESTART, =
0x4006c358}, {SIG_DFL}, 8) =3D 0=0A=
25773 rt_sigaction(SIGTERM, {0x804a3e0, [TERM], SA_RESTORER|SA_RESTART, =
0x4006c358}, {SIG_DFL}, 8) =3D 0=0A=
25773 rt_sigaction(SIGCHLD, {0x804a410, [CHLD], SA_RESTORER|SA_RESTART, =
0x4006c358}, {SIG_DFL}, 8) =3D 0=0A=
25773 time(NULL) =3D 1043242600=0A=
25773 poll([{fd=3D7, events=3DPOLLOUT, revents=3DPOLLOUT}, {fd=3D4, =
events=3DPOLLOUT, revents=3DPOLLOUT}, {fd=3D6, events=3DPOLLIN}, =
{fd=3D5, events=3DPOLLIN}, {fd=3D3, events=3DPOLLIN}], 5, 100) =3D 2=0A=
25773 poll(0, 0, 60000=0A=
) =3D -1 EINTR (Interrupted system call)=0A=
25773 --- SIGTERM (Terminated) ---=0A=
------=_NextPart_000_0003_01C2C234.EAA4EC00
Content-Type: application/octet-stream;
name="syslog-ng.conf"
Content-Transfer-Encoding: quoted-printable
Content-Disposition: attachment;
filename="syslog-ng.conf"
# syslog-ng configuration file.=0A=
#=0A=
# See syslog-ng(8) and syslog-ng.conf(5) for more information.=0A=
#=0A=
# This config file should work identical in all respects to a =
default=0A=
# syslogd Mandrake 7.2 system=0A=
#=0A=
# 20001113 - vdanen@mandrakesoft.com=0A=
=0A=
options { sync (0);=0A=
stats (0);=0A=
time_reopen (10);=0A=
log_fifo_size (1000);=0A=
long_hostnames (off);=0A=
use_dns (no);=0A=
use_fqdn (no);=0A=
create_dirs (no);=0A=
keep_hostname (yes);=0A=
};=0A=
=0A=
source sys { unix-stream ("/dev/log"); file ("/proc/kmsg" log_prefix =
("kernel: ")); internal(); };=0A=
source remote { udp(); };=0A=
=0A=
destination auth { file("/var/log/auth.log" fsync (yes)); };=0A=
destination syslog { file("/var/log/syslog"); };=0A=
destination user { file("/var/log/user.log"); };=0A=
destination mesg { file("/var/log/messages"); };=0A=
destination secure { file("/var/log/secure" fsync(yes)); };=0A=
destination mailinfo { file("/var/log/mail/info"); };=0A=
destination mailwarn { file("/var/log/mail/warnings"); };=0A=
destination mailerr { file("/var/log/mail/error"); };=0A=
destination croninfo { file("/var/log/cron/info"); };=0A=
destination cronwarn { file("/var/log/cron/warnings"); };=0A=
destination cronerr { file("/var/log/cron/error"); };=0A=
destination kerninfo { file("/var/log/kernel/info"); };=0A=
destination kernwarn { file("/var/log/kernel/warnings"); };=0A=
destination kernerr { file("/var/log/kernel/errors" fsync(yes)); };=0A=
destination lprinfo { file("/var/log/lpr/info"); };=0A=
destination lprwarn { file("/var/log/lpr/warnings"); };=0A=
destination lprerr { file("/var/log/lpr/error"); };=0A=
destination newsinfo { file("/var/log/news/news.notice"); };=0A=
destination newscrit { file("/var/log/news/news.crit"); };=0A=
destination newserr { file("/var/log/news/news.err"); };=0A=
destination daemoninfo { file("/var/log/daemons/info"); };=0A=
destination daemonwarn { file("/var/log/daemons/warnings"); };=0A=
destination daemonerr { file("/var/log/daemons/error"); };=0A=
destination spool { file("/var/log/spooler"); };=0A=
destination boot { file("/var/log/boot.log"); };=0A=
destination mailall { usertty("*"); };=0A=
destination expl { file("/var/log/explanations"); };=0A=
destination consoleall { file("/dev/tty12"); };=0A=
# destination for remote logs, change loghost to fqdn for remote =
host=0A=
#destination loghost { udp("loghost" port(999)); };=0A=
# destination from remote hosts=0A=
#destination remote_kern { file("/var/log/remote/remote_kernel.log"); =
};=0A=
#destination remote_daem { file("/var/log/remote/remote_daemon.log"); =
};=0A=
#destination remote_auth { file("/var/log/remote/remote_auth.log"); =
};=0A=
#destination remote_user { file("/var/log/remote/remote_user.log"); =
};=0A=
#destination remote_boot { file("/var/log/remote/remote_boot.log"); =
};=0A=
=0A=
# Generic filters=0A=
filter f_info { level(debug,info,notice); };=0A=
filter f_warn { level(warn); };=0A=
filter f_error { level(error..emerg); };=0A=
filter f_erronly { level(error); };=0A=
filter f_crit { level(crit); };=0A=
filter f_critonly { level(crit..emerg); };=0A=
filter f_emergency { level(emerg); };=0A=
filter f_mail { facility(mail); };=0A=
filter f_cron { facility(cron); };=0A=
filter f_kernel { facility(kern); };=0A=
filter f_lpr { facility(lpr); };=0A=
filter f_news { facility(news); };=0A=
filter f_daemon { facility(daemon); };=0A=
filter f_uucp { facility(uucp); };=0A=
# Specific filters=0A=
filter f_authonly { facility(auth,authpriv); };=0A=
filter f_user { facility(user); };=0A=
# Log anything (except mail) of level info or higher=0A=
# Don't log private authentication messages=0A=
filter f_mesgs { level(info..emerg) and not =
facility(mail,news,authpriv); };=0A=
# authpriv logging (restricted)=0A=
filter f_secure { facility(authpriv); };=0A=
filter f_spool { facility(uucp) or (facility(news) and =
level(crit..emerg)); };=0A=
filter f_boot { facility(local7); };=0A=
filter f_syslog { not facility(auth, authpriv); };=0A=
filter f_explanations { facility(local1); };=0A=
=0A=
# Various entry=0A=
log { source(sys); filter(f_authonly); destination(auth); };=0A=
log { source(sys); filter(f_syslog); destination(syslog); };=0A=
log { source(sys); filter(f_user); destination(user); };=0A=
=0A=
# Log anything (except mail) of level info or higher.=0A=
# Don't log private authentication messages!=0A=
log { source(sys); filter(f_mesgs); destination(mesg); };=0A=
=0A=
# The authpriv file has restricted access.=0A=
log { source(sys); filter(f_secure); destination(secure); };=0A=
=0A=
# Mail logging=0A=
log { source(sys); filter(f_mail); filter(f_info); =
destination(mailinfo); };=0A=
log { source(sys); filter(f_mail); filter(f_warn); =
destination(mailwarn); };=0A=
log { source(sys); filter(f_mail); filter(f_error); =
destination(mailerr); };=0A=
=0A=
# Cron logging=0A=
log { source(sys); filter(f_cron); filter(f_info); =
destination(croninfo); };=0A=
log { source(sys); filter(f_cron); filter(f_warn); =
destination(cronwarn); };=0A=
log { source(sys); filter(f_cron); filter(f_error); =
destination(cronerr); };=0A=
=0A=
# Kernel logging=0A=
log { source(sys); filter(f_kernel); filter(f_info); =
destination(kerninfo); };=0A=
log { source(sys); filter(f_kernel); filter(f_warn); =
destination(kernwarn); };=0A=
log { source(sys); filter(f_kernel); filter(f_error); =
destination(kernerr); };=0A=
=0A=
# Lpr logging=0A=
log { source(sys); filter(f_lpr); filter(f_info); destination(lprinfo); =
};=0A=
log { source(sys); filter(f_lpr); filter(f_warn); destination(lprwarn); =
};=0A=
log { source(sys); filter(f_lpr); filter(f_error); destination(lprerr); =
};=0A=
=0A=
# News logging=0A=
log { source(sys); filter(f_news); filter(f_info); =
destination(newsinfo); };=0A=
log { source(sys); filter(f_news); filter(f_critonly); =
destination(newscrit); };=0A=
log { source(sys); filter(f_news); filter(f_erronly); =
destination(newserr); };=0A=
=0A=
# Daemons logging=0A=
log { source(sys); filter(f_daemon); filter(f_info); =
destination(daemoninfo); };=0A=
log { source(sys); filter(f_daemon); filter(f_warn); =
destination(daemonwarn); };=0A=
log { source(sys); filter(f_daemon); filter(f_error); =
destination(daemonerr); };=0A=
=0A=
# Everybody gets emergency messages=0A=
log { source(sys); filter(f_emergency); destination(mailall); };=0A=
=0A=
# Save mail and news errors of level err and higher in a=0A=
# special file.=0A=
log { source(sys); filter(f_spool); destination(spool); };=0A=
=0A=
# Save boot messages also to boot.log=0A=
log { source(sys); filter(f_boot); destination(boot); };=0A=
=0A=
# Explanations from Mandrake Linux configuration tools=0A=
log { source(sys); filter(f_explanations); destination(expl); };=0A=
=0A=
# Log to console=0A=
#log { source(sys); destination(consoleall); };=0A=
=0A=
# Logs from remote hosts=0A=
#log { source(net); filter(f_kern); destination(remote_kern); };=0A=
#log { source(net); filter(f_daemon); destination(remote_daem); };=0A=
#log { source(net); filter(f_authonly); destination(remote_auth); };=0A=
#log { source(net); filter(f_user); destination(remote_user); };=0A=
#log { source(net); filter(f_boot); destination(remote_boot); };=0A=
------=_NextPart_000_0003_01C2C234.EAA4EC00--