No subject

callced 'src'. In your second config, your source is called 's_node',
the first instance is called 'src'. Make sure youre passing the proper
'-f' option to syslog-ng when you start it.<br>
<br>
</font></font><br>
Sent: Saturday, June 26, 2010 8:18:22 PM<br>
From: John R. Dunning <a class="moz-txt-link-rfc2396E" href="mailto:jrd at jrd.org">&lt;jrd at jrd.org&gt;</a><br>
To: Syslog-ng users' and developers' mailing list
<a class="moz-txt-link-rfc2396E" href="mailto:syslog-ng at lists.balabit.hu">&lt;syslog-ng at lists.balabit.hu&gt;</a> <br>
Subject: [syslog-ng] ***SPAM*** Re: Two instances of syslog-ng on the
same&nbsp;&nbsp; &nbsp;host?
<blockquote cite="mid:19494.46318.949742.380344 at bioraptor.jrd.org"
 type="cite">
  <pre wrap="">    From: "Patrick H." <a class="moz-txt-link-rfc2396E" href="mailto:syslogng at feystorm.net">&lt;syslogng at feystorm.net&gt;</a>
    Date: Sat, 26 Jun 2010 19:33:10 -0600
    
    Yes, that should work just fine. 

Well, ok, then I'm dense.

Here's the config for the proxy:

----------------------------------------------------------------
# $Header: /var/cvsroot/gentoo-x86/app-admin/syslog-ng/files/syslog-ng.conf.gentoo,v 1.5 2005/05/12 05:46:10 mr_bones_ Exp $
#
# Syslog-ng default configuration file for Gentoo Linux
# contributed by Michael Sterrett

# added by jrd 6/24/10
@version: 3.0

options
{ 
    chain_hostnames(no); 
    keep_hostname(yes);

    log_fifo_size(40000);
    flush_lines(10000); 

    stats_freq(43200);  # Stats message every 12 hours
};

source s_node
{
    tcp(max-connections(1000) port(1514) );
};

#source ignore
#{
#    internal();
#};

destination ssp     { tcp ("ssp" port(1514)); };

log { source(s_node); destination(ssp); };
----------------------------------------------------------------

and here's the config for the main instance:

----------------------------------------------------------------


@version: 3.0
# $Header: /var/cvsroot/gentoo-x86/app-admin/syslog-ng/files/syslog-ng.conf.gentoo.3,v 1.1 2010/04/06 02:11:35 mr_bones_ Exp $
#
# Syslog-ng default configuration file for Gentoo Linux

options { 
        chain_hostnames(no); 

        # The default action of syslog-ng is to log a STATS line
        # to the file every 10 minutes.  That's pretty ugly after a while.
        # Change it to every 12 hours so you get a nice daily update of
        # how many messages syslog-ng missed (0).
        stats_freq(43200); 
};

source src {
    unix-stream("/dev/log" max-connections(256));
    internal();
    file("/proc/kmsg");
};

destination messages { file("/var/log/messages"); };

# By default messages are logged to tty12...
destination console_all { file("/dev/tty12"); };
# ...if you intend to use /dev/console for programs like xconsole
# you can comment out the destination line above that references /dev/tty12
# and uncomment the line below.
#destination console_all { file("/dev/console"); };

log { source(src); destination(messages); };
log { source(src); destination(console_all); };
----------------------------------------------------------------

When I launch the second instance I still get


 * Starting syslog-ng ...Error binding socket; addr='AF_UNIX(/dev/log)', error='Address already in use (125)'
Error initializing source driver; source='src', id='src#0'
Error initializing message pipeline;

 * Failed to start syslog-ng




This is gentoo, btw.

Further hints?  Thanks in advance....
______________________________________________________________________________
Member info: <a class="moz-txt-link-freetext" href="https://lists.balabit.hu/mailman/listinfo/syslog-ng">https://lists.balabit.hu/mailman/listinfo/syslog-ng</a>
Documentation: <a class="moz-txt-link-freetext" href="http://www.balabit.com/support/documentation/?product=syslog-ng">http://www.balabit.com/support/documentation/?product=syslog-ng</a>
FAQ: <a class="moz-txt-link-freetext" href="http://www.campin.net/syslog-ng/faq.html">http://www.campin.net/syslog-ng/faq.html</a>

  </pre>
</blockquote>
</body>
</html>

--------------010901070702020603000405--