[syslog-ng] spoof_source not working

Chance Ellis chance.ellis at gmail.com
Tue Oct 4 23:07:42 CEST 2005


Here is just a snippet from the configure output:

checking pthread.h presence... yes
checking for pthread.h... yes
checking for pthread_create in -lpthread... yes
checking whether to enable Sun STREAMS support... yes
checking whether to enable Sun door support... yes
checking whether to enable TCP wrapper support... no
checking whether to enable spoof_source support... yes
checking how to enable static linking for certain libraries... no clues,
linking
everything dynamically, please send appropriate ld arguments to
syslog-ng at lists
.balabit.hu
checking libol version >= 0.3.16... ok
configure: creating ./config.status
config.status: creating Makefile
config.status: creating src/Makefile
config.status: creating src/tests/Makefile
config.status: creating doc/Makefile
config.status: creating doc/sgml/Makefile
config.status: creating contrib/Makefile
config.status: creating syslog-ng.spec
config.status: creating src/config.h
config.status: src/config.h is unchanged
config.status: executing depfiles commands
  Am I still missing something? This work on my Solaris 8 server, but not on
my Solaris 9 box.
 Thanks!
 On 10/4/05, Gerardo Amaya <joseg at galileo.edu> wrote:
>
> Chance Ellis wrote:
>
> > I am running syslog-ng 1.6.8 on Solaris 9. I recompiled with the
> > --enable-spoof-source configure option.
> >
> > Here is my config:
> >
> > destination d_squelch_acl { udp("10.159.234.52 <http://10.159.234.52> <
> http://10.159.234.52>"
> > port(514) spoof_source(yes)); };
> > filter f_squelch_acl { match("list squelch denied"); };
> > log { source(net); filter(f_squelch_acl); destination(d_squelch_acl);};
> > source net { udp(); };
> >
> >
> > If I start syslog-ng without spoof_source(yes) option, all messages
> > matching are forwarded to the machine in the destination. If I change
> > to spoof_source(yes) nothing gets forwarded at all. I do not get any
> > errors when I start syslog-ng, like "spoof-source support not compiled
> > in" which I get on other boxes I have not recompiled on yet.
> >
> > Any ideas?
> >
> > Chance
> >
> >
> >
> >------------------------------------------------------------------------
> >
> >_______________________________________________
> >syslog-ng maillist - syslog-ng at lists.balabit.hu
> >https://lists.balabit.hu/mailman/listinfo/syslog-ng
> >Frequently asked questions at http://www.campin.net/syslog-ng/faq.html
> >
> >
> >
> when you run the configure did you get in the result?
>
> checking whether to enable spoof_source support....... yes
>
> Sometimes it did not find the library where is suppose to be. your
> config looks ok. can you confirm on this?
>
> best regards
>
> Gerardo Amaya
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.balabit.hu/pipermail/syslog-ng/attachments/20051004/1d360878/attachment.htm


More information about the syslog-ng mailing list