[syslog-ng]nested entries?

scott syslog-ng@lists.balabit.hu
Thu, 11 Nov 2004 20:14:50 +1000


Anyone using SpamAssassin?  Somehow, I'm getting nested entries in the 
log.  WTF?

Heres two examples (one per line in the log file, obviously).


2004-11-11T16:39:02+1000 chloe spamd[704]: connection from localhost 
[127.0.0.1] at port 41701 2004-11-11T16:39:02+1000 chloe qmail-smtpd: 
1100151542.380171 tcpserver: end 2373 status 0

and

2004-11-11T16:39:02+1000 chloe spamd[2381]: info: setuid to slittle 
succeeded 2004-11-11T16:39:02+1000 chloe spamd[2381]: processing message 
<fb1301c4c7a3$99512e23$b7b0ab10@arrakis.es> for slittle:1000. 
2004-11-11T16:39:02+1000 chloe spamd[2381]: identified spam (10.4/5.0) 
for slittle:1000 in 0.2 seconds, 3493 bytes. 2004-11-11T16:39:02+1000 
chloe qmail: 1100151542.681701 new msg 12805507


I thought maybe the trailing \n was getting broken somehow, so I tried 
dumping SQL statements to file, and they're nested too (there's no 
closing quotes, brackets or semicolon before the next INSERT statement).


INSERT INTO logs (host, facility, priority, level, tag, date, program, 
msg) VALUES ( 'chloe', 'mail', 'info', 'info', '16', 
unix_timestamp('2004-11-11T16:39:02+1000'), 'spamd', 'spamd[704]: 
connection from localhost [127.0.0.1] at port 41701 INSERT INTO logs 
(host, facility, priority, level, tag, date, program, msg) VALUES ( 
'chloe', 'mail', 'info', 'info', '16', 
unix_timestamp('2004-11-11T16:39:02+1000'), 'qmail-smtpd', 'qmail-smtpd: 
1100151542.380171 tcpserver: end 2373 status 0');

and

INSERT INTO logs (host, facility, priority, level, tag, date, program, 
msg) VALUES ( 'chloe', 'mail', 'info', 'info', '16', 
unix_timestamp('2004-11-11T16:39:02+1000'), 'spamd', 'spamd[2381]: info: 
setuid to slittle succeeded INSERT INTO logs (host, facility, priority, 
level, tag, date, program, msg) VALUES ( 'chloe', 'mail', 'info', 
'info', '16', unix_timestamp('2004-11-11T16:39:02+1000'), 'spamd', 
'spamd[2381]: processing message 
<fb1301c4c7a3$99512e23$b7b0ab10@arrakis.es> for slittle:1000. INSERT 
INTO logs (host, facility, priority, level, tag, date, program, msg) 
VALUES ( 'chloe', 'mail', 'info', 'info', '16', 
unix_timestamp('2004-11-11T16:39:02+1000'), 'spamd', 'spamd[2381]: 
identified spam (10.4/5.0) for slittle:1000 in 0.2 seconds, 3493 bytes. 
INSERT INTO logs (host, facility, priority, level, tag, date, program, 
msg) VALUES ( 'chloe', 'mail', 'info', 'info', '16', 
unix_timestamp('2004-11-11T16:39:02+1000'), 'qmail', 'qmail: 
1100151542.681701 new msg 12805507');