[syslog-ng][PATCH] syslog-ng-1.6.5+20041206 fixes missing facility/priority in afinet.c

Balazs Scheidler syslog-ng@lists.balabit.hu
Mon, 13 Dec 2004 19:17:52 +0100


On Mon, 2004-12-13 at 14:51, Roberto Nibali wrote:

> When I start syslog-ng like follows:
> 
> # /sbin/syslog-ng -F -f /etc/syslog-ng.conf
> 
> I get the output (regarding the line: tcp("X.Y.W.Z" port(1514) 
> template("<$PRI>$DATE $HOST $TAG $MSG\n"));
> 
> DEBUG: this is the id '30'
> DEBUG: this is the id '20'
> DEBUG: I'm in M_TAG in macros.c
> DEBUG: this is the id '440'
> DEBUG: this is the id '480'
> 
> The real syslog-ng.conf is huge but the line above is the only part where I have 
> macro expansion, so I know that I fall through that destination. As you can see 
> I do not get the id '21' which would be M_PRI. It seems to be lost. If I check with
> 
>     tcpdump -X -s 1500 -n -i eth0 tcp and port 1514
> 
> I get something like following line:
> 
>    <>Dec 13 12:57:01 hostname app[1213]:
> 
> Look, to me it looks like maybe msg-pri is not available at the expansion time. 
> Maybe I also did something extremely stupid but I honestly have no time to debug 
> it any further right now and the patch I've sent earlier solves my problem.
> 
> I'll check once again though to see if I really missed something obvious :).

Sorry. You are right, PRI was not added to the gperf lookup table, thus
it was never resolved.

Index: macros.gprf
===================================================================
RCS file: /var/cvs/syslog-ng/syslog-ng/src/macros.gprf,v
retrieving revision 1.1.4.1
diff -u -r1.1.4.1 macros.gprf
--- macros.gprf 6 May 2004 07:37:10 -0000       1.1.4.1
+++ macros.gprf 13 Dec 2004 18:16:37 -0000
@@ -7,6 +7,7 @@
 PRIORITY, M_LEVEL
 LEVEL, M_LEVEL
 TAG, M_TAG
+PRI, M_PRI
 DATE, M_DATE
 FULLDATE, M_FULLDATE
 ISODATE, M_ISODATE

-- 
Bazsi