syslog-ng hast no more facilities than old syslog?

Is it right that syslog-ng hat no more facilities than 
sylog-old? 

I hoped that I could take any name:
    root <at> rex2:~>logger -p 'hello.err' hello
    logger: unknown facility name: hallo.

thx
ekkard
_______________________________________________
syslog-ng maillist  -  syslog-ng <at> lists.balabit.hu
https://lists.balabit.hu/mailman/listinfo/syslog-ng
Frequently asked questions at http://www.campin.net/syslog-ng/faq.html

Re: syslog-ng has no more facilities than old syslog?

* Ekkard Gerlach (me) wrote:

> Is it right that syslog-ng has no more facilities than 
> sylog-old? 

sorry for my bad english. I wasn't able to write "has" corretly 
for two times.

> 
> I hoped that I could take any name:
>     root <at> rex2:~>logger -p 'hello.err' hello
>     logger: unknown facility name: hallo.
> 
> thx
> ekkard
_______________________________________________
syslog-ng maillist  -  syslog-ng <at> lists.balabit.hu
https://lists.balabit.hu/mailman/listinfo/syslog-ng
Frequently asked questions at http://www.campin.net/syslog-ng/faq.html

Re: syslog-ng hast no more facilities than old syslog?

On Thu, 1 Jan 2004, Ekkard Gerlach wrote:

> Is it right that syslog-ng hat no more facilities than
> sylog-old?
>
> I hoped that I could take any name:
>     root <at> rex2:~>logger -p 'hello.err' hello
>     logger: unknown facility name: hallo.
>

Syslog facilities are standardized, and fairly well established.
Syslog-ng, as a tool, doesn't extend the syslog standard, it's simply a
more robust implementation of the syslog standard. Chances are, any
extensions you're considering fall fairly well inside established
facilities and severities.

- billn

_______________________________________________
syslog-ng maillist  -  syslog-ng <at> lists.balabit.hu
https://lists.balabit.hu/mailman/listinfo/syslog-ng
Frequently asked questions at http://www.campin.net/syslog-ng/faq.html

Re: syslog-ng hast no more facilities than old syslog?

What are you trying to do? Maybe the people on the list can point you into
the right direction?

Are you trying to log from a program say amavisd, all you do is create a
filter and another log file.

----- Original Message ----- 
From: "Ekkard Gerlach" <ekkardgerlach <at> aiai.de>
To: <syslog-ng <at> lists.balabit.hu>
Sent: Thursday, January 01, 2004 3:42 AM
Subject: [syslog-ng]syslog-ng hast no more facilities than old syslog?

> Is it right that syslog-ng hat no more facilities than
> sylog-old?
>
> I hoped that I could take any name:
>     root <at> rex2:~>logger -p 'hello.err' hello
>     logger: unknown facility name: hallo.
>
> thx
> ekkard
> _______________________________________________
> syslog-ng maillist  -  syslog-ng <at> lists.balabit.hu
> https://lists.balabit.hu/mailman/listinfo/syslog-ng
> Frequently asked questions at http://www.campin.net/syslog-ng/faq.html
>
>

_______________________________________________
syslog-ng maillist  -  syslog-ng <at> lists.balabit.hu

Syslog-ng and Oracle

Hey all,
I just got syslog-ng installed and cofigured properly, and I was wondering
is there any way to get oracle to log to it? I know that by default Oracle
logs to its alert.log in $ORACLE_HOME, but I am unsure as to whether this
behaivour can be overridden to use the syslog protocol. Any help would be
greatly appreciated.

Roberto

_______________________________________________
syslog-ng maillist  -  syslog-ng <at> lists.balabit.hu
https://lists.balabit.hu/mailman/listinfo/syslog-ng
Frequently asked questions at http://www.campin.net/syslog-ng/faq.html

funny character is being inserted into each log line + perm(-1) n ot working

I am having a problem with logging from a Cisco PIX firewall to a syslog-ng
file.
For months it has been working fine, but something happened on 18th
december:

Dec 18 16:08:25 BPFpix-int Dec 18 2003 08:53:15: %PIX-3-313001: Denied ICMP
type=8, code=0 from 217.81.176.93 on interface 0
Dec 18 09:46:50^ <at>  BPFpix-int %PIX-3-313001: Denied ICMP type=8, code=0 from
217.79.97.90 on interface 0

all the lines logged since "Dec 18 09:46:50" have all had that ^ <at>  code after
it, and no date.
i don't know why the times on the previous line are different, but the
syslog server now has our "official" time, so i'm not that bothered.

Around this time i was trying to sort out the permissions problems with
/dev/ files i was having when syslog-ng restarted, so i guess this could be
connected.

This ^ <at>  character is only in the PIX firewall log (which is saved to a
different file than most of the other syslog messages).

The pertinent config lines are as follows:

destination null { file("/dev/null" perm(0666)); };
source BPFpix { udp(ip ("192.168.1.2") port(514)); };
filter f_bpfpixpingdrop { host ("BPFpix") and match("Denied ICMP"); };

# BPFpix messages
#

RE: funny character is being inserted into each log line + perm(-1) n ot working

The ^ <at>  isn't really 'funny', per se; it's a representation of Ctrl- <at> 
which in turn is actually the null character.

Hence I suspect syslog-ng is safely mangling a null somewhere
into a readable representation before writing it to the log file.

Quite whose fault this is, is another matter.

Ted.

************************************************************************************************
This E-mail message, including any attachments, is intended only for the person
or entity to which it is addressed, and may contain confidential information.
If you are not the intended recipient, any review, retransmission, disclosure,
copying, modification or other use of this E-mail message or attachments is
strictly forbidden.
If you have received this E-mail message in error, please contact the author and
delete the message and any attachments from your computer.
You are also advised that the views and opinions expressed in this E-mail
message and any attachments are the author's own, and may not reflect the views
and opinions of FLEXTECH Television Limited.
************************************************************************************************

_______________________________________________
syslog-ng maillist  -  syslog-ng <at> lists.balabit.hu
https://lists.balabit.hu/mailman/listinfo/syslog-ng
Frequently asked questions at http://www.campin.net/syslog-ng/faq.html

Re: syslog-ng mysql syntax error

Compile Error on Solaris 2.8

Trying to compile libol 0.3.9 on Solaris.

Get this error on Make:

Making all in utils
make[1]: Entering directory
`/tmp/syslog-ng/libol-0.3.9/utils'
make[1]: Nothing to be done for `all'.
make[1]: Leaving directory
`/tmp/syslog-ng/libol-0.3.9/utils'
Making all in src
make[1]: Entering directory
`/tmp/syslog-ng/libol-0.3.9/src'
/bin/sh ../libtool --mode=compile gcc -DHAVE_CONFIG_H
-I. -I/tmp/syslog-ng/libol
-0.3.9/src -I.   -I/opt/gnome/include
-I/usr/openwin/share/include/X11/extension
s -I/usr/openwin/include -D_GNU_SOURCE  -Wall -O2 -c
format.c
rm -f .libs/format.lo
gcc -DHAVE_CONFIG_H -I.
-I/tmp/syslog-ng/libol-0.3.9/src -I.
-I/opt/gnome/includ
e -I/usr/openwin/share/include/X11/extensions
-I/usr/openwin/include -D_GNU_SOUR
CE -Wall -O2 -c format.c       -fPIC -DPIC -o
.libs/format.lo
In file included from objects.h:41,
                 from format.h:27,
                 from format.c:24:
objtypes.h:36:3: #error No suitable type found to use
for UINT32
objtypes.h:44:3: #error No suitable type found to use
for UINT16

In my configure I noticed that when it checks the size
of short, int and long they are returned Cached 0.

Any ideas?

Thanks!

__________________________________
Do you Yahoo!?
Yahoo! Hotjobs: Enter the "Signing Bonus" Sweepstakes
http://hotjobs.sweepstakes.yahoo.com/signingbonus
_______________________________________________
syslog-ng maillist  -  syslog-ng <at> lists.balabit.hu
https://lists.balabit.hu/mailman/listinfo/syslog-ng
Frequently asked questions at http://www.campin.net/syslog-ng/faq.html

RE: funny character is being inserted into each log li ne + perm(-1) n ot working

> The ^ <at>  isn't really 'funny', per se; it's a representation of Ctrl- <at> 
> which in turn is actually the null character.

ah, i see. i wondered what it was!

> Hence I suspect syslog-ng is safely mangling a null somewhere
> into a readable representation before writing it to the log file.

hmm, strange.
is there a way to turn this off?
i dont mind that the date isn't displaying, and it's only affecting the
firewall, so it's not a big deal really.
it's just annoying to get alert emails that don't actually contain anything
useful!

> Quite whose fault this is, is another matter.

:)
thanks

chris

--

-- 
The content of this e-mail is confidential, may contain privileged material
and is intended solely for the recipient(s) named above. If you receive this
in error, please notify Software AG immediately and delete this e-mail.

Software AG (UK) Limited
Registered in England & Wales 1310740
Registered Office: Hudson House, Hudson Way,
Pride Park, Derby DE24 8HS
_______________________________________________
syslog-ng maillist  -  syslog-ng <at> lists.balabit.hu
https://lists.balabit.hu/mailman/listinfo/syslog-ng
Frequently asked questions at http://www.campin.net/syslog-ng/faq.html