[syslog-ng]errors on HPUX 11.0 (syslog-ng-1.6.rc4)

[Stephan Hendl]

Hi all,

I get the following errors on HPUX11 using syslog-ng-1.6.rc4

What does "...unparseable log message: " mean and how can I solve the
problem? My /etc/syslog-ng.conf ion enclosed.

Thanks
Stephan

------------------
-- root@tc1:/var/adm/syslog> cat messages=20
[2003/11/25 13:29:24] tc1 notice [syslog] syslog-ng[1057]: syslog-ng
version 1.6.0rc4 starting
[2003/11/25 13:29:25] tc1 notice [daemon] prngd[1083]: prngd 0.9.12 (05
March 2001) started up for user root
[2003/11/25 13:29:25] tc1 notice [daemon] prngd[1083]: have 7 out of 60
filedescriptors open
Y!=E5C=3D>e^a01 01:00:00] tc1 err [syslog] unparseable log message:
\"<=BFvz?=E1=B2=DD=AA=A8R=AA9P3_}=A3=A8zL;=BD =F3E2=F7=E3=E4=E1C=C69J=AES=
r#
ej3\'=B8p=E2A=DFy=B4,Y=E5=C4=F2=B1=C3s =ADS=D2=D6q=DEy=D2=E2I=A8=FC=CD
4=BFD=E5=AAR
[2003/11/25 13:29:28] tc1 info [auth] sshd[1118]: Server listening on
0.0.0.0 port 22.
[2003/11/25 13:29:28] tc1 emerg [kern]=20
[2003/11/25 13:29:39] tc1 info [daemon] /usr/sbin/nfsd[1240]: Setting
STREAMS-HEAD high water value to 65536.
[2003/11/25 13:29:39] tc1 info [daemon] /usr/sbin/nfsd[1241]: nfsd
do_one mpctl succeeded: ncpus =3D 1.
[2003/11/25 13:29:39] tc1 info [daemon] /usr/sbin/nfsd[1241]: nfsd
do_one pmap 2
[2003/11/25 13:29:39] tc1 info [daemon] /usr/sbin/nfsd[1241]: nfsd
do_one pmap 3
[2003/11/25 13:29:39] tc1 info [daemon] /usr/sbin/nfsd[1241]: nfsd
do_one bind 0
[2003/11/25 13:29:39] tc1 info [daemon] /usr/sbin/nfsd[1241]: Return
from t_optmgmt(XTI_DISTRIBUTE) 0
[1970/01/01 01:00:00] tc1 err [syslog] unparseable log message: \"<h@\"
[1970/01/01 01:00:00] tc1 err [syslog] unparseable log message: \"<h@\"
[2003/11/25 13:29:39] tc1 info [daemon] /usr/sbin/nfsd[1247]: nfsd 0 1=20
sock 4
[1970/01/01 01:00:00] tc1 err [syslog] unparseable log message: \"<h@\"
[2003/11/25 13:29:39] tc1 info [daemon] /usr/sbin/nfsd[1248]: nfsd 0 2=20
sock 4
[1970/01/01 01:00:00] tc1 err [syslog] unparseable log message: \"<h@\"
[2003/11/25 13:29:39] tc1 info [daemon] /usr/sbin/nfsd[1241]: nfsd 0 3=20
sock 4
[1970/01/01 01:00:00] tc1 err [syslog] unparseable log message: \"<h@\"
[2003/11/25 13:30:02] tc1 info [auth] sshd[1408]: Accepted publickey for
hendl from 10.128.11.71 port 37605 ssh2

------------------------
root@tc1:/var/adm/syslog> cat /etc/syslog-ng.conf=20
# syslog-ng configuration file.
#
# This should behave pretty much like the original syslog on HP-UX. But
# it could be configured a lot smarter.
#
# See syslog-ng(8) and syslog-ng.conf(8) for more information.
#
# 20000925 gb@sysfive.com

options { sync (0);
          time_reopen (10);
          log_fifo_size (1000);
          long_hostnames (off);
          use_dns (no);
          use_fqdn (no);
          create_dirs (no);
          keep_hostname (yes);
        };

source s_sys { pipe("/dev/log"); internal(); };

destination d_syslog {
  file("/var/adm/syslog/messages"
  owner("root")
  group("root")
  perm(0644)
  template( "[$YEAR/$MONTH/$DAY $HOUR:$MIN:$SEC] $HOST $PRIORITY
[$FACILITY] $MESSAGE\n"));
};

destination d_cons { file("/dev/console"); };
destination d_mesg { file("/var/adm/syslog/syslog.log"); };
destination d_mail { file("/var/adm/syslog/mail.log"); };
destination d_mlrt { usertty("root"); };
destination d_mlal { usertty("*"); };

filter f_filter1   { facility(mail) and level(debug); };
filter f_filter2   { level(debug) or level(info) or level(alert) or
level(emerg); };
filter f_filter3   { level(alert); };
filter f_filter4   { level(emerg); };
filter f_syslog    { not (facility(mail) or facility(user)); };

log { source(s_sys); filter(f_filter1); destination(d_mail); };
log { source(s_sys); filter(f_filter2); destination(d_mesg); };
log { source(s_sys); filter(f_filter3); destination(d_cons);
                                        destination(d_mlrt); };
log { source(s_sys); filter(f_filter4); destination(d_mlal); };
log { source(s_sys); filter(f_syslog);  destination(d_syslog); };
root@tc1:/var/adm/syslog>



Stephan Hendl <Stephan.Hendl@lds.brandenburg.de>