[syslog-ng]Syslog-ng 1.6.4 adds ^@ to each line

syslog-ng@lists.balabit.hu syslog-ng@lists.balabit.hu
Fri, 4 Jun 2004 13:34:33 +0200


Hi again,
here is an tcpdump with parameter -s 255 thx to jozsef

13:24:30.357952 000.000.000.000.syslog-ng > 000.000.000.000.syslog-ng: udp
83
0x0000   4500 006f d16e 0000 3e11 938c 0000 0000        E..o.n..>.......
0x0010   0000 0000 0202 0202 005b 902c 3c31 3430        .........[.,<140
0x0020   3e41 4343 543a 204c 4f47 494e 2046 4149        >ACCT:.LOGIN.FAI
0x0030   4c45 4420 6173 2079 6164 2066 726f 6d20        LED.as.yad.from.
0x0040   5445 4c4e 4554 2031 302e 3139 392e 322e        TELNET.10.199.2.
0x0050   3635 2061 7420 4672 6920 4a75 6e20 2034        65.at.Fri.Jun..4
0x0060   2031 323a 3234 3a32 3820 3230 3034 00          .12:24:28.2004.

@John
thx for your hint, but I think it`s to late now.
I simply forgot to hide this in the hex part.

@all
Hope somebody can tell me why I get ^@ at each line.

Thx
Benjamin

John Kristoff wrote:
> On Fri, 4 Jun 2004 10:52:11 +0200
> Benjamin.Zoeller@salt-solutions.de wrote:
> 
>> 10:49:09.668790 .syslog-ng > .syslog-ng: udp 85
>> 0x0000   4500 0071 cfed 0000 3e11 950b 0ac6 00fd       
>> E..q....>....... 0x0010   0ac7 00fa 0202 0202 005d 1cd7 3c31 3430   
>> .........]..<140 
> 
> If you're going to go through the trouble of hiding IPs, you should
> mask the hex portion as well.  Though your use of 10/8 offers you
> some privacy already I suppose.
> 
> John