[syslog-ng] Apache 2 + logger + syslog-ng

Balazs Scheidler bazsi at balabit.hu
Wed Apr 12 10:43:38 CEST 2006


On Tue, 2006-04-11 at 09:50 -0400, Doyon, Jean-Francois wrote:
> Sorry,
> 
> Here's the system information:
> 
> syslog-ng 1.6.9 built from source (on both ends)
> CentOS/RHEL 4.3 (on both ends)
> Apache 2.2 built from source as well
> /usr/bin/logger from package util-linux-2.12a-16.EL4.12

I've just tried to send a 5000 byte message to syslog-ng and it
correctly wrote MSGONLY to the file. Tried the same using logger and it
did not work:

write(3, "<5>Apr 12 10:42:22 <someone>: xx"..., 431) = 431
readlink("/proc/self/fd/0", "pipe:[69597]", 511) = 12
ioctl(0, SNDCTL_TMR_TIMEBASE or TCGETS, 0xbfffe878) = -1 EINVAL (Invalid argument)
time([1144831342])                      = 1144831342
write(3, "<5>Apr 12 10:42:22 <someone>: xx"..., 431) = 431
readlink("/proc/self/fd/0", "pipe:[69597]", 511) = 12
ioctl(0, SNDCTL_TMR_TIMEBASE or TCGETS, 0xbfffe878) = -1 EINVAL (Invalid argument)
time([1144831342])                      = 1144831342
write(3, "<5>Apr 12 10:42:22 <someone>: xx"..., 431) = 431
readlink("/proc/self/fd/0", "pipe:[69597]", 511) = 12
ioctl(0, SNDCTL_TMR_TIMEBASE or TCGETS, 0xbfffe878) = -1 EINVAL (Invalid argument)
time([1144831342])                      = 1144831342
write(3, "<5>Apr 12 10:42:22 <someone>: xx"..., 431) = 431
read(0, "xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx"..., 4096) = 905
readlink("/proc/self/fd/0", "pipe:[69597]", 511) = 12
ioctl(0, SNDCTL_TMR_TIMEBASE or TCGETS, 0xbfffe878) = -1 EINVAL (Invalid argument)
time([1144831342])                      = 1144831342
write(3, "<5>Apr 12 10:42:22 <someone>: xx"..., 431) = 431

strace shows that logger writes 431 bytes to syslog-ng, so the problem is 
in logger.

-- 
Bazsi



More information about the syslog-ng mailing list