[syslog-ng] spoof_source not working

[Chance Ellis]

Nate,
 Thanks for replying. I did try that but I get the same results... UDP
destinations work until I add the spoof_source to the destination.
 How does the spoof_source work? Does it call some external library that I
have the wrong version of on the Solaris9 boxes? What about lex? I also ran
debug on the syslog-ng runtime and it just spews a bunch of senseless info.
Might it be helpful if I post that?
 Thanks for your help!

 On 10/11/05, Nate Campi <nate at campin.net> wrote:
>
> I'd just compile it on Solaris 8 and copy the binary over to the Solaris
> 9 box until a fix was found (or


never bother).
>
> On Tue, Oct 11, 2005 at 03:27:38PM -0400, Chance Ellis wrote:
> > Can someone please point me in a direction on where I could get some
> help
> > with this?
> >
> > On 10/6/05, Chance Ellis <chance.ellis at gmail.com> wrote:
> > >
> > > Has anyone else had problems doing spoof_source on Solaris 9???
> > >
> > >
> > > On 10/4/05, Chance Ellis <chance.ellis at gmail.com> wrote:
> > > >
> > > > Here is just a snippet from the configure output:
> > > >
> > > > checking pthread.h presence... yes
> > > > checking for pthread.h... yes
> > > > checking for pthread_create in -lpthread... yes
> > > > checking whether to enable Sun STREAMS support... yes
> > > > checking whether to enable Sun door support... yes
> > > > checking whether to enable TCP wrapper support... no
> > > > checking whether to enable spoof_source support... yes
> > > > checking how to enable static linking for certain libraries... no
> clues,
> > > > linking
> > > > everything dynamically, please send appropriate ld arguments to
> > > > syslog-ng at lists
> > > > .balabit.hu
> > > > checking libol version >= 0.3.16... ok
> > > > configure: creating ./config.status
> > > > config.status: creating Makefile
> > > > config.status: creating src/Makefile
> > > > config.status: creating src/tests/Makefile
> > > > config.status : creating doc/Makefile
> > > > config.status : creating doc/sgml/Makefile
> > > > config.status: creating contrib/Makefile
> > > > config.status: creating syslog-ng.spec
> > > > config.status: creating src/config.h
> > > > config.status: src/config.h is unchanged
> > > > config.status: executing depfiles commands
> > > > Am I still missing something? This work on my Solaris 8 server, but
> > > > not on my Solaris 9 box.
> > > > Thanks!
> > > > On 10/4/05, Gerardo Amaya <joseg at galileo.edu > wrote:
> > > > >
> > > > > Chance Ellis wrote:
> > > > >
> > > > > > I am running syslog-ng 1.6.8 on Solaris 9. I recompiled with the
> > > > > > --enable-spoof-source configure option.
> > > > > >
> > > > > > Here is my config:
> > > > > >
> > > > > > destination d_squelch_acl { udp("10.159.234.52<http://10.159.234.52>
> <http://10.159.234.52/><http://10.159.234.52
> > > > > >"
> > > > > > port(514) spoof_source(yes)); };
> > > > > > filter f_squelch_acl { match("list squelch denied"); };
> > > > > > log { source(net); filter(f_squelch_acl);
> > > > > destination(d_squelch_acl);};
> > > > > > source net { udp(); };
> > > > > >
> > > > > >
> > > > > > If I start syslog-ng without spoof_source(yes) option, all
> messages
> > > > > > matching are forwarded to the machine in the destination. If I
> > > > > change
> > > > > > to spoof_source(yes) nothing gets forwarded at all. I do not get
> any
> > > > >
> > > > > > errors when I start syslog-ng, like "spoof-source support not
> > > > > compiled
> > > > > > in" which I get on other boxes I have not recompiled on yet.
> > > > > >
> > > > > > Any ideas?
> > > > > >
> > > > > > Chance
> > > > > >
> > > > > >
> > > > > >
> > > > >
> >------------------------------------------------------------------------
> > > > >
> > > > > >
> > > > > >_______________________________________________
> > > > > >syslog-ng maillist - syslog-ng at lists.balabit.hu
> > > > > > https://lists.balabit.hu/mailman/listinfo/syslog-ng
> > > > > >Frequently asked questions at
> > > > > http://www.campin.net/syslog-ng/faq.html
> > > > > >
> > > > > >
> > > > > >
> > > > > when you run the configure did you get in the result?
> > > > >
> > > > > checking whether to enable spoof_source support....... yes
> > > > >
> > > > > Sometimes it did not find the library where is suppose to be. your
> > > > > config looks ok. can you confirm on this?
> > > > >
> > > > > best regards
> > > > >
> > > > > Gerardo Amaya
> > > > >
> > > >
> > > >
> > >
>
> > _______________________________________________
> > syslog-ng maillist - syslog-ng at lists.balabit.hu
> > https://lists.balabit.hu/mailman/listinfo/syslog-ng
> > Frequently asked questions at http://www.campin.net/syslog-ng/faq.html
> >
>
>
> --
> Nate
>
> "The mind is everything. What you think you become." - Buddha
>
> _______________________________________________
> syslog-ng maillist - syslog-ng at lists.balabit.hu
> https://lists.balabit.hu/mailman/listinfo/syslog-ng
> Frequently asked questions at http://www.campin.net/syslog-ng/faq.html
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.balabit.hu/pipermail/syslog-ng/attachments/20051011/8d0aba81/attachment.html