[syslog-ng] [Bug 212] New: strange hostnames from /etc/hosts with threaded(yes);

[bugzilla at bugzilla.balabit.com]

https://bugzilla.balabit.com/show_bug.cgi?id=212

           Summary: strange hostnames from /etc/hosts with threaded(yes);
           Product: syslog-ng
           Version: 3.3.x
          Platform: PC
        OS/Version: Linux
            Status: NEW
          Severity: normal
          Priority: unspecified
         Component: syslog-ng
        AssignedTo: bazsi at balabit.hu
        ReportedBy: bpkroth at gmail.com
Type of the Report: ---
   Estimated Hours: 0.0


Created an attachment (id=67)
 --> (https://bugzilla.balabit.com/attachment.cgi?id=67)
syslog-ng.conf

Hi, I've backported syslog-ng 3.3.5 for Debian squeeze in order to get the threaded feature for our main syslog server, but I've found that with threaded(yes)
and sending logs to directories byhost ($FROM_FULLHOST) set, then I get a few directories that are actually weird mashups from entries in /etc/hosts (eg:
fqdn{tab}shortname{newline}, where {tab} is an actual tab character, similarly for newlines).

As an example:
13      lager.$domain   lager   loghost

2.208   ldap1.$domain   ldap1

Here, 13 and 2.208 are the last part of the IP listing for that host, but the rest is missing.

This seems similar to Bug #183, except that I'm not getting segfaults, just goofy log file names and directory names, which in turn causes some other problems
on our end.

For now, I've disabled threaded (and was happy to find that the CPU load on the machine is still quite reduced, so good work on whatever other scalability
improvements you've done - epoll?), but I'd like to take advantage of the slew of cores the machine has.

use_dns(yes) and dns_cache(yes) are set, but it doesn't use a persistent file, but rather the system resolver is set to 127.0.0.1 and there's a local bind
named slave running (which has all of the necessary reverse lookup information).

Attached is my full conf file.  Please let me know if you need anymore info.

Thanks,
Brian


-- 
Configure bugmail: https://bugzilla.balabit.com/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are watching all bug changes.