[syslog-ng]syslog-ng do not work....

Alessandro Fiorenzi syslog-ng@lists.balabit.hu
Tue, 27 Jan 2004 16:52:36 +0100


--=-9KQDaw9BXqRM+oJsUe66
Content-Type: text/plain
Content-Transfer-Encoding: 7bit

Hi, I have set this configuration on central logserver

options {
        long_hostnames(off);     
        sync(0);     
        log_fifo_size(1000);
        dnscache(yes);
        use_fqdn(yes);
        use_time_recvd(true);
        };

source src {
        internal();
        file("/proc/kmsg" log_prefix("kernel: "));
        tcp(ip(192.168.52.100) port(514) max-connections(1000));
        udp(ip(0.0.0.0) port(514));
        };

but it does not work. The fist errore is on dnscache(yes);, if i remove
this I get the second on use_time_recvd(true);, remove this one I get
errore on file("/proc/kmsg" log_prefix("kernel: ")); .... why?

Thanks

Fiorenzi A.


------------------------------------------------------------------------
INFOGROUP S.P.A                 http://www.infogroup.it 
-------------------------------------------------------------------------
DR. FIORENZI ALESSANDRO 

Consulente Tribunale Firenze - sicurezza informatica -
Security Administrator 
Socio CLUSIT, ALSI




Tel : +39.055.43.65.742 
CE : +39.335.64.144.77 
@Email : a.fiorenzi@infogroup.it 
PGP Key: http://www.infogroup.it/ds/fiorenzi.asc
-------------------------------------------------------------------------
            "Faber est suae quisque fortunae" 
-------------------------------------------------------------------------

--=-9KQDaw9BXqRM+oJsUe66
Content-Type: text/html; charset=utf-8
Content-Transfer-Encoding: 7bit

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 TRANSITIONAL//EN">
<HTML>
<HEAD>
  <META HTTP-EQUIV="Content-Type" CONTENT="text/html; CHARSET=UTF-8">
  <META NAME="GENERATOR" CONTENT="GtkHTML/3.0.9">
</HEAD>
<BODY>
Hi, I have set this configuration on central logserver<BR>
<BR>
options {<BR>
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; long_hostnames(off);&nbsp;&nbsp;&nbsp;&nbsp; <BR>
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; sync(0);&nbsp;&nbsp;&nbsp;&nbsp; <BR>
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; log_fifo_size(1000);<BR>
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; dnscache(yes);<BR>
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; use_fqdn(yes);<BR>
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; use_time_recvd(true);<BR>
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; };<BR>
<BR>
source src {<BR>
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; internal();<BR>
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; file(&quot;/proc/kmsg&quot; log_prefix(&quot;kernel: &quot;));<BR>
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; tcp(ip(192.168.52.100) port(514) max-connections(1000));<BR>
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; udp(ip(0.0.0.0) port(514));<BR>
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; };<BR>
<BR>
but it does not work. The fist errore is on dnscache(yes);, if i remove this I get the second on use_time_recvd(true);, remove this one I get errore on file(&quot;/proc/kmsg&quot; log_prefix(&quot;kernel: &quot;)); .... why?<BR>
<BR>
Thanks<BR>
<BR>
Fiorenzi A.<BR>
<BR>
<BR>
<TABLE CELLSPACING="0" CELLPADDING="0" WIDTH="100%">
<TR>
<TD>
<TABLE CELLSPACING="0" CELLPADDING="0" WIDTH="100%">
<TR>
<TD>
<FONT SIZE="3"><B>------------------------------------------------------------------------ 
<ADDRESS>INFOGROUP S.P.A&nbsp;&nbsp; &nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp; &nbsp; http://www.infogroup.it </ADDRESS>
-------------------------------------------------------------------------<BR>
DR. FIORENZI ALESSANDRO </B></FONT><BR>
<BR>
Consulente Tribunale Firenze - sicurezza informatica -<BR>
Security Administrator <BR>
Socio <A HREF="file:///home/fiore/signature/www.clusit.it"><U>CLUSIT</U></A>, <A HREF="file:///home/fiore/signature/www.alsi.it"><U>ALSI</U></A><BR>
<BR>
<BR>
<BR>
<BR>
<ADDRESS>Tel : +39.055.43.65.742 <BR>
CE : +39.335.64.144.77 <BR>
@Email : a.fiorenzi@infogroup.it <BR>
PGP Key: http://www.infogroup.it/ds/fiorenzi.asc</ADDRESS>
<FONT SIZE="3"><I>-------------------------------------------------------------------------<BR>
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; <B>&quot;Faber est suae quisque fortunae&quot; </B><BR>
-------------------------------------------------------------------------</I></FONT>
</TD>
</TR>
</TABLE>

</TD>
</TR>
</TABLE>

</BODY>
</HTML>

--=-9KQDaw9BXqRM+oJsUe66--