[syslog-ng]nested entries?
scott
syslog-ng@lists.balabit.hu
Thu, 11 Nov 2004 20:14:50 +1000
Anyone using SpamAssassin? Somehow, I'm getting nested entries in the
log. WTF?
Heres two examples (one per line in the log file, obviously).
2004-11-11T16:39:02+1000 chloe spamd[704]: connection from localhost
[127.0.0.1] at port 41701 2004-11-11T16:39:02+1000 chloe qmail-smtpd:
1100151542.380171 tcpserver: end 2373 status 0
and
2004-11-11T16:39:02+1000 chloe spamd[2381]: info: setuid to slittle
succeeded 2004-11-11T16:39:02+1000 chloe spamd[2381]: processing message
<fb1301c4c7a3$99512e23$b7b0ab10@arrakis.es> for slittle:1000.
2004-11-11T16:39:02+1000 chloe spamd[2381]: identified spam (10.4/5.0)
for slittle:1000 in 0.2 seconds, 3493 bytes. 2004-11-11T16:39:02+1000
chloe qmail: 1100151542.681701 new msg 12805507
I thought maybe the trailing \n was getting broken somehow, so I tried
dumping SQL statements to file, and they're nested too (there's no
closing quotes, brackets or semicolon before the next INSERT statement).
INSERT INTO logs (host, facility, priority, level, tag, date, program,
msg) VALUES ( 'chloe', 'mail', 'info', 'info', '16',
unix_timestamp('2004-11-11T16:39:02+1000'), 'spamd', 'spamd[704]:
connection from localhost [127.0.0.1] at port 41701 INSERT INTO logs
(host, facility, priority, level, tag, date, program, msg) VALUES (
'chloe', 'mail', 'info', 'info', '16',
unix_timestamp('2004-11-11T16:39:02+1000'), 'qmail-smtpd', 'qmail-smtpd:
1100151542.380171 tcpserver: end 2373 status 0');
and
INSERT INTO logs (host, facility, priority, level, tag, date, program,
msg) VALUES ( 'chloe', 'mail', 'info', 'info', '16',
unix_timestamp('2004-11-11T16:39:02+1000'), 'spamd', 'spamd[2381]: info:
setuid to slittle succeeded INSERT INTO logs (host, facility, priority,
level, tag, date, program, msg) VALUES ( 'chloe', 'mail', 'info',
'info', '16', unix_timestamp('2004-11-11T16:39:02+1000'), 'spamd',
'spamd[2381]: processing message
<fb1301c4c7a3$99512e23$b7b0ab10@arrakis.es> for slittle:1000. INSERT
INTO logs (host, facility, priority, level, tag, date, program, msg)
VALUES ( 'chloe', 'mail', 'info', 'info', '16',
unix_timestamp('2004-11-11T16:39:02+1000'), 'spamd', 'spamd[2381]:
identified spam (10.4/5.0) for slittle:1000 in 0.2 seconds, 3493 bytes.
INSERT INTO logs (host, facility, priority, level, tag, date, program,
msg) VALUES ( 'chloe', 'mail', 'info', 'info', '16',
unix_timestamp('2004-11-11T16:39:02+1000'), 'qmail', 'qmail:
1100151542.681701 new msg 12805507');