[syslog-ng] [Bug 236] New: syslog-ng loses part of kernel log and replaces it with \0 characters

bugzilla at bugzilla.balabit.com bugzilla at bugzilla.balabit.com
Sun Jun 2 20:51:22 CEST 2013


https://bugzilla.balabit.com/show_bug.cgi?id=236

           Summary: syslog-ng loses part of kernel log and replaces it with
                    \0 characters
           Product: syslog-ng
           Version: 3.4.x
          Platform: PC
        OS/Version: Linux
            Status: NEW
          Severity: major
          Priority: unspecified
         Component: syslog-ng
        AssignedTo: bazsi at balabit.hu
        ReportedBy: kroz.nn at gmail.com
Type of the Report: bug
   Estimated Hours: 0.0


1. syslog-ng with default configuration inserts characters with code 0 into /var/log/messages (2nd line, beginning of kernel log / dmesg). Comparison with
output of dmesg has shown, that no log records lost, just characters inserted.
2. syslog-ng with more complicated configuration inserts two batches of \0 characters (2nd line and 12th line). Second batch of characters replaces 118 lines
of kernel log (comparing with log of default configuration and dmesg)

OS: Gentoo Linux

Attachments:
 - For each of scenario 1 and scenario 2: configuration file, relevant parts of /var/log/messages
 - Gentoo compilation environment (output of `emerge --info` )
 - Beginning of syslog-ng compilation log (configure stage)

Syslog-ng version:
syslog-ng 3.4.1
Installer-Version: 3.4.1
Revision: ssh+git://algernon@git.balabit//var/scm/git/syslog-ng/syslog-ng-ose--mainline--3.4#master-3.4#dea0b2a11bffe1877ec10d29279fbb0f635d70e7
Compile-Date: Jun  2 2013 12:23:49
Available-Modules:
syslogformat,dbparser,afsocket-notls,afuser,afamqp,basicfuncs,cryptofuncs,afsocket-tls,afprog,afsocket,system-source,confgen,affile,csvparser
Enable-Debug: off
Enable-GProf: off
Enable-Memtrace: off
Enable-IPv6: on
Enable-Spoof-Source: off
Enable-TCP-Wrapper: on
Enable-Linux-Caps: on
Enable-Pcre: on


-- 
Configure bugmail: https://bugzilla.balabit.com/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are watching all bug changes.


More information about the syslog-ng mailing list