Re: [evlog-dev] Libevlsyslog.so.1 cannot be preloaded

Hien Q Nguyen <[email protected]> Tue, 30 Jan 2007 15:04:13 -0800
Newsgroups gmane.linux.kernel.event-logging
Message-ID <OFFFCF447A.43DC62BE-ON88257273.007EB471-88257273.007EBA96@us.ibm.com>
--===============0777188611==
Content-type: multipart/related; 
	Boundary="0__=07BBF8E0DFED32E18f9e8a93df938690918c07BBF8E0DFED32E1"

--0__=07BBF8E0DFED32E18f9e8a93df938690918c07BBF8E0DFED32E1
Content-type: multipart/alternative; 
	Boundary="1__=07BBF8E0DFED32E18f9e8a93df938690918c07BBF8E0DFED32E1"

--1__=07BBF8E0DFED32E18f9e8a93df938690918c07BBF8E0DFED32E1
Content-type: text/plain; charset=US-ASCII
Content-transfer-encoding: quoted-printable






Can you try this?
stop evlogd (/etc/init.d/evlog stop)

start evlogd manually in foreground mode
/sbin/evlogd -f

and try ssh and telnet.
Please let me know what happens.

Regards, Hien.

Hien Nguyen
[email protected]
Office : 503-578-4347
Mobile : 503-702-8814


                                                                       =
    
             "Lanam, Jeff"                                             =
    
             <[email protected]                                         =
    
             m>                                                        =
 To 
                                       Hien Q Nguyen/Beaverton/IBM@IBMU=
S,  
             01/30/2007 11:17          <[email protected]=
rge 
             AM                        .ne>                            =
    
                                                                       =
 cc 
                                                                       =
    
                                                                   Subj=
ect 
                                       RE: [evlog-dev] Libevlsyslog.so.=
1   
                                       cannot be preloaded             =
    
                                                                       =
    
                                                                       =
    
                                                                       =
    
                                                                       =
    
                                                                       =
    
                                                                       =
    




Thanks, but it didn't work.  I did as you said, commenting out the
authpriv.* line and restarting syslogd.  Still get the connection rejec=
ted.

There is a comment in libevlsyslog.c:
/* We currently don't log AUTHPRIV */
This is followed by two lines which are commented out:
//  if (LOG_FAC(pri) << 3 =3D=3D LOG_AUTHPRIV)
//      return;

The messages written to /var/log/secure do show up in evlog's privatelo=
g,
while forwarding is enabled. So I think something is happening later on=
.

Regards,
Jeff


From: Hien Q Nguyen [mailto:[email protected]]
Sent: Tuesday, January 30, 2007 10:47 AM
To: Lanam, Jeff; [email protected]
Subject: RE: [evlog-dev] Libevlsyslog.so.1 cannot be preloaded



Looks like the evlog forwarder either did not handling the LOG_AUTHPRIV=

correctly or not handling it at all. A work around comes to mind (you
probably don't like it) is to comment out the authpriv.* line in the
/etc/syslog.conf and re-start syslogd

If ssh and telnet works when you comment out that line and restart sysl=
ogd,
you can file a bug. If you have time, you can look in the libevlsyslog.=
c
for the permanent fix :-)

Thanks, Hien.

Hien Nguyen
[email protected]
Office : 503-578-4347
Mobile : 503-702-8814
Inactive hide details for "Lanam, Jeff" <[email protected]>"Lanam, Jeff=
"
<[email protected]>

                                                                       =
    
                         "Lanam,                                       =
    
                         Jeff"                                         =
    
                         <jeff.lanam@                                  =
    
                         hp.com>                                       =
    
                                                                       =
 To 
                                                                       =
    
                         01/30/2007               Hien Q               =
    
                         09:50 AM                 Nguyen/Beaverton/IBM@=
IBM 
                                                  US                   =
    
                                                                       =
    
                                                                       =
 cc 
                                                                       =
    
                                                                       =
    
                                                                   Subj=
ect 
                                                                       =
    
                                                  RE: [evlog-dev]      =
    
                                                  Libevlsyslog.so.1 can=
not 
                                                  be preloaded         =
    
                                                                       =
    
                                                                       =
    
                                                                       =
    
                                                                       =
    
                                                                       =
    
                                                                       =
    



I rebuilt all of evlog, in particular evlogd, for 64 bits. I deleted th=
e
old eventlog and privatelog and installed the rebuilt objects. Now
everything seems to work, except that after I add libevlsyslog.so to th=
e
ld.so.preload file, any telnet or ssh to the system gets "Connection
rejected." This of course is a big problem.

Any ideas? Thanks much for your help.


Regards,
Jeff

From: Hien Q Nguyen [mailto:[email protected]]
Sent: Monday, January 29, 2007 10:37 AM
To: Lanam, Jeff
Subject: RE: [evlog-dev] Libevlsyslog.so.1 cannot be preloaded


Sorry for the delay. I am currently quite busy with other project also =
I
don't have access to a 64 bit machine (AMD). I will ask someone else lo=
ok
into this issue. The problem looks likes 64 bits vs 32 bits between gli=
bc
and syslogd and evlogd.

Thanks
Hien Nguyen
[email protected]
Office : 503-578-4347
Mobile : 503-702-8814
Inactive hide details for "Lanam, Jeff" <[email protected]>"Lanam, Jeff=
"
<[email protected]>
                                                                       =
    
    "Lanam, Jeff" <[email protected]>                                  =
    
                                                                       =
    
                                                                       =
    
    01/26/2007 03:35 PM                                                =
    
                                                                       =
 To 
                                                                       =
    
                                                       Hien Q          =
    
                                                       Nguyen/Beaverton=
/IB 
                                                       M@IBMUS         =
    
                                                                       =
    
                                                                       =
 cc 
                                                                       =
    
                                                                       =
    
                                                                   Subj=
ect 
                                                                       =
    
                                                       RE: [evlog-dev] =
    
                                                       Libevlsyslog.so.=
1   
                                                       cannot be preloa=
ded 
                                                                       =
    
                                                                       =
    
                                                                       =
    
                                                                       =
    
                                                                       =
    
                                                                       =
    




Greetings. Sorry to keep pestering you.

I was able to get past the Segmentation violation. The problem is that =
in
libevlsyslog.c,
_init is defined as (int argc, char *argv[], ...) Changing the paramete=
r
declaration to void, I get to the point of actually trying to write the=

event to evlog.

Now I get an error in _evlSysWriteEx2, on the second write, the one tha=
t
writes the data in buff. errno is 32, broken pipe, and when signals are=

turned back on, SIGPIPE is raised. It appears that evlogd is still runn=
ing.
Any suggestions?

Regards,
Jeff Lanam



From: Lanam, Jeff
Sent: Wednesday, January 24, 2007 5:17 PM
To: 'Hien Q Nguyen'
Subject: RE: [evlog-dev] Libevlsyslog.so.1 cannot be preloaded

Thank you for your reply last week. I did check libevlsyslog.conf. The =
only
thing in it is "libc.so.6", which is in /lib, so that looks right.

I have been able to get libevlsyslog to work on a Pentium system, strai=
ght
from the RPM. The system I am failing on is an AMD64. I tried to rebuil=
d
libevlsyslog.so. I seem to get it built ok, but when I set LD_PRELOAD t=
o
reference it, every program I run gets Segmentation violation.

Any hints on debugging this? I can't seem to get gdb to tell me anythin=
g.

I try the following sequence:
gdb
set environment LD_PRELOAD=3D./libevlsyslog.so.1
break libevlsyslog.c:_init (this prompts me to make this a pending
breakpoint)
signal SIGSEGV stop
file hello (which only has a printf in it, no calls to syslog)
run

I get the SIGSEGV before my program starts. The breakpoint never happen=
ed.
There is no stack frame to display, so I cannot tell where it abended.
Here is what gdb outputs:
Program terminated with signal SIGSEGV, Segmentation fault.
The program no longer exists.
You can't do that without a process to debug.

Any ideas?

Thanks
jeff

From: Hien Q Nguyen [mailto:[email protected]]
Sent: Monday, January 15, 2007 3:24 PM
To: Lanam, Jeff
Cc: [email protected];
[email protected]
Subject: Re: [evlog-dev] Libevlsyslog.so.1 cannot be preloaded


Check libevlsyslog.conf for the correct version of glibc. It that does =
not
work, you may need to get the evlog source and build evlog on your syst=
em
then copy libevlsyslog.so to /lib


Hien Nguyen
[email protected]

Inactive hide details for "Lanam, Jeff" <[email protected]>"Lanam, Jeff=
"
<[email protected]>
                                                                       =
    
                                              "Lanam                   =
    
                                              ,                        =
    
                                              Jeff"                    =
    
                                              <jeff.                   =
    
                                              lanam@                   =
 To 
                                              hp.com                   =
    
                                              >             <evlog-deve=
lop 
                                              Sent          [email protected]=
our 
                                              by:           ceforge.net=
>   
                                              evlog-                   =
    
                                              develo                   =
 cc 
                                              pers-b                   =
    
                                              ounces                   =
    
                                              @lists               Subj=
ect 
                                              .sourc                   =
    
                                              eforge        [evlog-dev]=
    
                                              .net          Libevlsyslo=
g.s 
                                                            o.1 cannot =
be  
                                                            preloaded  =
    
                                              01/15/                   =
    
                                              2007                     =
    
                                              01:54                    =
    
                                              PM                       =
    
                                                                       =
    
                                                                       =
    


I have installed the evlog 1.6.1 RPM on Red Hat Linux.  I cannot get
syslog forwarding to work.
I tried running /sbin/slog_fwd, but libevlsyslog.so.1 does not appear t=
o
be in the RPM.
I tried copying libevlsys.log.so.0.0.0 to libevlsyslog.so.1, so that
slog_fwd can find it.
When I do that, every command from then on gets at least one of the
following errors:

ERROR: ld.so: object '/lib/libevlsyslog.so.1' from /etc/ld.so.preload
cannot be preloaded: ignored.

Please help, the rest of evlog seems to work fine.  I am not a Linux
expert; I have no idea why it cannot be preloaded.

Regards, Jeff


-----------------------------------------------------------------------=
--
Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.net's Techsay panel and you'll get the chance to share=

your
opinions on IT & business topics through brief surveys - and earn cash
http://www.techsay.com/default.php?page=3Djoin.php&p=3Dsourceforge&CID=3D=
DEVDEV
_______________________________________________
evlog-developers mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/evlog-developers
=

--1__=07BBF8E0DFED32E18f9e8a93df938690918c07BBF8E0DFED32E1
Content-type: text/html; charset=US-ASCII
Content-Disposition: inline
Content-transfer-encoding: quoted-printable

<html><body>
<p><font size=3D"4">Can you try this?<br>
stop evlogd (/etc/init.d/evlog stop)<br>
<br>
start evlogd manually in foreground mode<br>
/sbin/evlogd -f<br>
<br>
and try ssh and telnet.<br>
Please let me know what happens.<br>
<br>
Regards, Hien.</font><br>
<br>
Hien Nguyen<br>
[email protected]<br>
Office : 503-578-4347<br>
Mobile : 503-702-8814<br>
<img width=3D"16" height=3D"16" src=3D"cid:1__=3D07BBF8E0DFED32E18f9e8a=
[email protected]" border=3D"0" alt=3D"Inactive hide details for &quot=
;Lanam, Jeff&quot; &lt;[email protected]&gt;">&quot;Lanam, Jeff&quot; &=
lt;[email protected]&gt;<br>
<br>
<br>

<table width=3D"100%" border=3D"0" cellspacing=3D"0" cellpadding=3D"0">=

<tr valign=3D"top"><td style=3D"background-image:url(cid:2__=3D07BBF8E0=
[email protected]); background-repeat: no-repeat; " widt=
h=3D"40%">
<ul>
<ul>
<ul>
<ul><b><font size=3D"2">&quot;Lanam, Jeff&quot; &lt;[email protected]&g=
t;</font></b><font size=3D"2"> </font>
<p><font size=3D"2">01/30/2007 11:17 AM</font></ul>
</ul>
</ul>
</ul>
</td><td width=3D"60%">
<table width=3D"100%" border=3D"0" cellspacing=3D"0" cellpadding=3D"0">=

<tr valign=3D"top"><td width=3D"1%"><img width=3D"58" height=3D"1" src=3D=
"cid:[email protected]" border=3D"0" alt=3D=
""><br>
<div align=3D"right"><font size=3D"2">To</font></div></td><td width=3D"=
100%"><img width=3D"1" height=3D"1" src=3D"cid:3__=3D07BBF8E0DFED32E18f=
[email protected]" border=3D"0" alt=3D""><br>
<font size=3D"2">Hien Q Nguyen/Beaverton/IBM@IBMUS, &lt;evlog-developer=
[email protected]&gt;</font></td></tr>

<tr valign=3D"top"><td width=3D"1%"><img width=3D"58" height=3D"1" src=3D=
"cid:[email protected]" border=3D"0" alt=3D=
""><br>
<div align=3D"right"><font size=3D"2">cc</font></div></td><td width=3D"=
100%"><img width=3D"1" height=3D"1" src=3D"cid:3__=3D07BBF8E0DFED32E18f=
[email protected]" border=3D"0" alt=3D""><br>
</td></tr>

<tr valign=3D"top"><td width=3D"1%"><img width=3D"58" height=3D"1" src=3D=
"cid:[email protected]" border=3D"0" alt=3D=
""><br>
<div align=3D"right"><font size=3D"2">Subject</font></div></td><td widt=
h=3D"100%"><img width=3D"1" height=3D"1" src=3D"cid:3__=3D07BBF8E0DFED3=
[email protected]" border=3D"0" alt=3D""><br>
<font size=3D"2">RE: [evlog-dev] Libevlsyslog.so.1 cannot be preloaded<=
/font></td></tr>
</table>

<table border=3D"0" cellspacing=3D"0" cellpadding=3D"0">
<tr valign=3D"top"><td width=3D"58"><img width=3D"1" height=3D"1" src=3D=
"cid:[email protected]" border=3D"0" alt=3D=
""></td><td width=3D"336"><img width=3D"1" height=3D"1" src=3D"cid:3__=3D=
[email protected]" border=3D"0" alt=3D""></td></=
tr>
</table>
</td></tr>
</table>
<br>
<font color=3D"#0000FF" face=3D"Arial">Thanks, but it didn't work.  I d=
id as you said, commenting out the authpriv.* line and restarting syslo=
gd.  Still get the connection rejected.</font><br>
<font size=3D"4"> </font><br>
<font color=3D"#0000FF" face=3D"Arial">There is a comment in libevlsysl=
og.c:</font><br>
<font color=3D"#0000FF" face=3D"Arial">/* We currently don't log AUTHPR=
IV */</font><br>
<font color=3D"#0000FF" face=3D"Arial">This is followed by two lines wh=
ich are commented out:</font><br>
<font color=3D"#0000FF" face=3D"Arial">//  if (LOG_FAC(pri) &lt;&lt; 3 =
=3D=3D LOG_AUTHPRIV)</font><br>
<font color=3D"#0000FF" face=3D"Arial">//      return;</font><br>
<font size=3D"4"> </font><br>
<font color=3D"#0000FF" face=3D"Arial">The messages written to /var/log=
/secure do show up in evlog's privatelog, while forwarding is enabled. =
So I think something is happening later on.</font><br>
<font size=3D"4"> </font><br>
<font color=3D"#0000FF" face=3D"Arial">Regards,</font><br>
<font color=3D"#0000FF" face=3D"Arial">Jeff</font><br>
<font size=3D"4"> </font><br>
<br>
<hr width=3D"100%" size=3D"2" align=3D"left"><b><font face=3D"Tahoma">F=
rom:</font></b><font face=3D"Tahoma"> Hien Q Nguyen [<a href=3D"mailto:=
[email protected]">mailto:[email protected]</a>] </font><b><font fa=
ce=3D"Tahoma"><br>
Sent:</font></b><font face=3D"Tahoma"> Tuesday, January 30, 2007 10:47 =
AM</font><b><font face=3D"Tahoma"><br>
To:</font></b><font face=3D"Tahoma"> Lanam, Jeff; evlog-developers@list=
s.sourceforge.ne</font><b><font face=3D"Tahoma"><br>
Subject:</font></b><font face=3D"Tahoma"> RE: [evlog-dev] Libevlsyslog.=
so.1 cannot be preloaded</font><font size=3D"4"><br>
</font>
<p><font size=3D"4">Looks like the evlog forwarder either did not handl=
ing the LOG_AUTHPRIV correctly or not handling it at all. A work around=
 comes to mind (you probably don't like it) is to comment out the authp=
riv.* line in the /etc/syslog.conf and re-start syslogd<br>
<br>
If ssh and telnet works when you comment out that line and restart sysl=
ogd, you can file a bug. If you have time, you can look in the libevlsy=
slog.c for the permanent fix :-)<br>
<br>
Thanks, Hien.<br>
<br>
Hien Nguyen<br>
[email protected]<br>
Office : 503-578-4347<br>
Mobile : 503-702-8814<br>
</font><img src=3D"cid:[email protected]" =
width=3D"16" height=3D"16" alt=3D"Inactive hide details for &quot;Lanam=
, Jeff&quot; &lt;[email protected]&gt;"><font size=3D"4">&quot;Lanam, J=
eff&quot; &lt;[email protected]&gt;<br>
<br>
</font>
<table width=3D"100%" border=3D"0" cellspacing=3D"0" cellpadding=3D"0">=

<tr valign=3D"top"><td width=3D"50%">
<ul>
<ul>
<ul>
<ul>
<ul>
<ul>
<ul>
<ul><b>&quot;Lanam, Jeff&quot; &lt;[email protected]&gt;</b> 
<p>01/30/2007 09:50 AM</ul>
</ul>
</ul>
</ul>
</ul>
</ul>
</ul>
</ul>
</td><td width=3D"50%">
<table width=3D"100%" border=3D"0" cellspacing=3D"0" cellpadding=3D"0">=

<tr valign=3D"top"><td width=3D"17%"><img src=3D"cid:5__=3D07BBF8E0DFED=
[email protected]" width=3D"58" height=3D"1"><div align=3D"r=
ight">To</div></td><td width=3D"83%"><img src=3D"cid:5__=3D07BBF8E0DFED=
[email protected]" width=3D"1" height=3D"1"><br>
Hien Q Nguyen/Beaverton/IBM@IBMUS</td></tr>

<tr valign=3D"top"><td width=3D"17%"><img src=3D"cid:5__=3D07BBF8E0DFED=
[email protected]" width=3D"58" height=3D"1"><div align=3D"r=
ight">cc</div></td><td width=3D"83%"><img src=3D"cid:5__=3D07BBF8E0DFED=
[email protected]" width=3D"1" height=3D"1"></td></tr>

<tr valign=3D"top"><td width=3D"17%"><img src=3D"cid:5__=3D07BBF8E0DFED=
[email protected]" width=3D"58" height=3D"1"><div align=3D"r=
ight">Subject</div></td><td width=3D"83%"><img src=3D"cid:5__=3D07BBF8E=
[email protected]" width=3D"1" height=3D"1"><br>
RE: [evlog-dev] Libevlsyslog.so.1 cannot be preloaded</td></tr>
</table>

<table width=3D"100%" border=3D"0" cellspacing=3D"0" cellpadding=3D"0">=

<tr valign=3D"top"><td width=3D"15%"><img src=3D"cid:5__=3D07BBF8E0DFED=
[email protected]" width=3D"1" height=3D"1"></td><td width=3D=
"85%"><img src=3D"cid:[email protected]" w=
idth=3D"1" height=3D"1"></td></tr>
</table>
</td></tr>
</table>
<font size=3D"4" color=3D"#0000FF" face=3D"Arial"><br>
I rebuilt all of evlog, in particular evlogd, for 64 bits. I deleted th=
e old eventlog and privatelog and installed the rebuilt objects. Now ev=
erything seems to work, except that after I add libevlsyslog.so to the =
ld.so.preload file, any telnet or ssh to the system gets &quot;Connecti=
on rejected.&quot; This of course is a big problem.</font><font size=3D=
"4"><br>
</font><font size=3D"4" color=3D"#0000FF" face=3D"Arial"><br>
Any ideas? Thanks much for your help.</font><font size=3D"4"><br>
<br>
</font><font size=3D"4" color=3D"#0000FF" face=3D"Arial"><br>
Regards,<br>
Jeff</font><font size=3D"4"><br>
<br>
</font><hr width=3D"100%" size=3D"2" align=3D"left"><b><font size=3D"4"=
 face=3D"Tahoma">From:</font></b><font size=3D"4" face=3D"Tahoma"> Hien=
 Q Nguyen [</font><a href=3D"mailto:[email protected]"><u><font size=3D=
"4" color=3D"#0000FF" face=3D"Tahoma">mailto:[email protected]</font>=
</u></a><font size=3D"4" face=3D"Tahoma">] </font><b><font size=3D"4" f=
ace=3D"Tahoma"><br>
Sent:</font></b><font size=3D"4" face=3D"Tahoma"> Monday, January 29, 2=
007 10:37 AM</font><b><font size=3D"4" face=3D"Tahoma"><br>
To:</font></b><font size=3D"4" face=3D"Tahoma"> Lanam, Jeff</font><b><f=
ont size=3D"4" face=3D"Tahoma"><br>
Subject:</font></b><font size=3D"4" face=3D"Tahoma"> RE: [evlog-dev] Li=
bevlsyslog.so.1 cannot be preloaded</font>
<p><font size=3D"5">Sorry for the delay. I am currently quite busy with=
 other project also I don't have access to a 64 bit machine (AMD). I wi=
ll ask someone else look into this issue. The problem looks likes 64 bi=
ts vs 32 bits between glibc and syslogd and evlogd.<br>
<br>
Thanks<br>
Hien Nguyen<br>
[email protected]<br>
Office : 503-578-4347<br>
Mobile : 503-702-8814</font><font size=3D"4"><br>
</font><img src=3D"cid:[email protected]" =
width=3D"16" height=3D"16" alt=3D"Inactive hide details for &quot;Lanam=
, Jeff&quot; &lt;[email protected]&gt;"><font size=3D"5">&quot;Lanam, J=
eff&quot; &lt;[email protected]&gt;<br>
</font>
<table width=3D"100%" border=3D"0" cellspacing=3D"0" cellpadding=3D"0">=

<tr valign=3D"top"><td width=3D"62%">
<ul>
<ul>
<ul>
<ul>
<ul>
<ul>
<ul>
<ul>
<ul>
<ul>
<ul>
<ul>
<ul>
<ul>
<ul>
<ul><b><font size=3D"4">&quot;Lanam, Jeff&quot; &lt;[email protected]&g=
t;</font></b><font size=3D"4"> </font>
<p><font size=3D"4">01/26/2007 03:35 PM</font></ul>
</ul>
</ul>
</ul>
</ul>
</ul>
</ul>
</ul>
</ul>
</ul>
</ul>
</ul>
</ul>
</ul>
</ul>
</ul>
</td><td width=3D"38%">
<table width=3D"100%" border=3D"0" cellspacing=3D"0" cellpadding=3D"0">=

<tr valign=3D"top"><td width=3D"15%"><img src=3D"cid:5__=3D07BBF8E0DFED=
[email protected]" width=3D"58" height=3D"1"><div align=3D"r=
ight"><font size=3D"4">To</font></div></td><td width=3D"85%"><img src=3D=
"cid:[email protected]" width=3D"1" height=
=3D"1"><font size=3D"4"><br>
Hien Q Nguyen/Beaverton/IBM@IBMUS</font></td></tr>

<tr valign=3D"top"><td width=3D"15%"><img src=3D"cid:5__=3D07BBF8E0DFED=
[email protected]" width=3D"58" height=3D"1"><div align=3D"r=
ight"><font size=3D"4">cc</font></div></td><td width=3D"85%"><img src=3D=
"cid:[email protected]" width=3D"1" height=
=3D"1"></td></tr>

<tr valign=3D"top"><td width=3D"15%"><img src=3D"cid:5__=3D07BBF8E0DFED=
[email protected]" width=3D"58" height=3D"1"><div align=3D"r=
ight"><font size=3D"4">Subject</font></div></td><td width=3D"85%"><img =
src=3D"cid:[email protected]" width=3D"1" =
height=3D"1"><font size=3D"4"><br>
RE: [evlog-dev] Libevlsyslog.so.1 cannot be preloaded</font></td></tr>
</table>

<table width=3D"100%" border=3D"0" cellspacing=3D"0" cellpadding=3D"0">=

<tr valign=3D"top"><td width=3D"50%"><img src=3D"cid:5__=3D07BBF8E0DFED=
[email protected]" width=3D"1" height=3D"1"></td><td width=3D=
"50%"><img src=3D"cid:[email protected]" w=
idth=3D"1" height=3D"1"></td></tr>
</table>
</td></tr>
</table>
<font size=3D"5" color=3D"#0000FF" face=3D"Arial"><br>
<br>
Greetings. Sorry to keep pestering you.<br>
<br>
I was able to get past the Segmentation violation. The problem is that =
in libevlsyslog.c,<br>
_init is defined as (int argc, char *argv[], ...) Changing the paramete=
r declaration to void, I get to the point of actually trying to write t=
he event to evlog.<br>
<br>
Now I get an error in _evlSysWriteEx2, on the second write, the one tha=
t writes the data in buff. errno is 32, broken pipe, and when signals a=
re turned back on, SIGPIPE is raised. It appears that evlogd is still r=
unning. Any suggestions?<br>
<br>
Regards,<br>
Jeff Lanam</font><font size=3D"5"><br>
<br>
<br>
</font><font size=3D"4"><br>
</font><hr width=3D"100%" size=3D"2" align=3D"left"><b><font size=3D"5"=
 face=3D"Tahoma">From:</font></b><font size=3D"5" face=3D"Tahoma"> Lana=
m, Jeff </font><b><font size=3D"5" face=3D"Tahoma"><br>
Sent:</font></b><font size=3D"5" face=3D"Tahoma"> Wednesday, January 24=
, 2007 5:17 PM</font><b><font size=3D"5" face=3D"Tahoma"><br>
To:</font></b><font size=3D"5" face=3D"Tahoma"> 'Hien Q Nguyen'</font><=
b><font size=3D"5" face=3D"Tahoma"><br>
Subject:</font></b><font size=3D"5" face=3D"Tahoma"> RE: [evlog-dev] Li=
bevlsyslog.so.1 cannot be preloaded</font><font size=3D"5" color=3D"#00=
00FF" face=3D"Arial"><br>
<br>
Thank you for your reply last week. I did check libevlsyslog.conf. The =
only thing in it is &quot;libc.so.6&quot;, which is in /lib, so that lo=
oks right.<br>
<br>
I have been able to get libevlsyslog to work on a Pentium system, strai=
ght from the RPM. The system I am failing on is an AMD64. I tried to re=
build libevlsyslog.so. I seem to get it built ok, but when I set LD_PRE=
LOAD to reference it, every program I run gets Segmentation violation.<=
br>
<br>
Any hints on debugging this? I can't seem to get gdb to tell me anythin=
g.<br>
<br>
I try the following sequence:<br>
gdb<br>
set environment LD_PRELOAD=3D./libevlsyslog.so.1<br>
break libevlsyslog.c:_init (this prompts me to make this a pending brea=
kpoint)<br>
signal SIGSEGV stop<br>
file hello (which only has a printf in it, no calls to syslog)<br>
run<br>
<br>
I get the SIGSEGV before my program starts. The breakpoint never happen=
ed. There is no stack frame to display, so I cannot tell where it abend=
ed.<br>
Here is what gdb outputs:<br>
Program terminated with signal SIGSEGV, Segmentation fault.<br>
The program no longer exists.<br>
You can't do that without a process to debug.<br>
<br>
Any ideas?<br>
<br>
Thanks<br>
jeff</font><font size=3D"5"><br>
</font><font size=3D"4"><br>
</font><hr width=3D"100%" size=3D"2" align=3D"left"><b><font size=3D"5"=
 face=3D"Tahoma">From:</font></b><font size=3D"5" face=3D"Tahoma"> Hien=
 Q Nguyen [</font><a href=3D"mailto:[email protected]"><u><font size=3D=
"5" color=3D"#0000FF" face=3D"Tahoma">mailto:[email protected]</font>=
</u></a><font size=3D"5" face=3D"Tahoma">] </font><b><font size=3D"5" f=
ace=3D"Tahoma"><br>
Sent:</font></b><font size=3D"5" face=3D"Tahoma"> Monday, January 15, 2=
007 3:24 PM</font><b><font size=3D"5" face=3D"Tahoma"><br>
To:</font></b><font size=3D"5" face=3D"Tahoma"> Lanam, Jeff</font><b><f=
ont size=3D"5" face=3D"Tahoma"><br>
Cc:</font></b><font size=3D"5" face=3D"Tahoma"> evlog-developers@lists.=
sourceforge.net; [email protected]</font><=
b><font size=3D"5" face=3D"Tahoma"><br>
Subject:</font></b><font size=3D"5" face=3D"Tahoma"> Re: [evlog-dev] Li=
bevlsyslog.so.1 cannot be preloaded</font><font size=3D"4"> </font>
<p><font size=3D"7">Check libevlsyslog.conf for the correct version of =
glibc. It that does not work, you may need to get the evlog source and =
build evlog on your system then copy libevlsyslog.so to /lib</font><fon=
t size=3D"6"><br>
<br>
<br>
Hien Nguyen<br>
[email protected]</font><font size=3D"5"><br>
</font><font size=3D"4"><br>
</font><img src=3D"cid:[email protected]" =
width=3D"16" height=3D"16" alt=3D"Inactive hide details for &quot;Lanam=
, Jeff&quot; &lt;[email protected]&gt;"><font size=3D"6">&quot;Lanam, J=
eff&quot; &lt;[email protected]&gt;</font>
<table width=3D"100%" border=3D"0" cellspacing=3D"0" cellpadding=3D"0">=

<tr valign=3D"top"><td width=3D"70%">
<ul>
<ul>
<ul>
<ul>
<ul>
<ul>
<ul>
<ul>
<ul>
<ul>
<ul>
<ul>
<ul>
<ul>
<ul>
<ul>
<ul>
<ul>
<ul>
<ul>
<ul>
<ul>
<ul>
<ul>
<ul>
<ul>
<ul>
<ul>
<ul>
<ul>
<ul>
<ul><b><font size=3D"5">&quot;Lanam, Jeff&quot; &lt;[email protected]&g=
t;</font></b><font size=3D"5"> <br>
Sent by: [email protected]</font><font siz=
e=3D"6"> </font>
<p><font size=3D"5">01/15/2007 01:54 PM</font></ul>
</ul>
</ul>
</ul>
</ul>
</ul>
</ul>
</ul>
</ul>
</ul>
</ul>
</ul>
</ul>
</ul>
</ul>
</ul>
</ul>
</ul>
</ul>
</ul>
</ul>
</ul>
</ul>
</ul>
</ul>
</ul>
</ul>
</ul>
</ul>
</ul>
</ul>
</ul>
</td><td width=3D"30%">
<table width=3D"100%" border=3D"0" cellspacing=3D"0" cellpadding=3D"0">=

<tr valign=3D"top"><td width=3D"17%"><img src=3D"cid:5__=3D07BBF8E0DFED=
[email protected]" width=3D"58" height=3D"1"><div align=3D"r=
ight"><font size=3D"5">To</font></div></td><td width=3D"83%"><img src=3D=
"cid:[email protected]" width=3D"1" height=
=3D"1"><font size=3D"5"><br>
&lt;[email protected]&gt;</font></td></tr>

<tr valign=3D"top"><td width=3D"17%"><img src=3D"cid:5__=3D07BBF8E0DFED=
[email protected]" width=3D"58" height=3D"1"><div align=3D"r=
ight"><font size=3D"5">cc</font></div></td><td width=3D"83%"><img src=3D=
"cid:[email protected]" width=3D"1" height=
=3D"1"></td></tr>

<tr valign=3D"top"><td width=3D"17%"><img src=3D"cid:5__=3D07BBF8E0DFED=
[email protected]" width=3D"58" height=3D"1"><div align=3D"r=
ight"><font size=3D"5">Subject</font></div></td><td width=3D"83%"><img =
src=3D"cid:[email protected]" width=3D"1" =
height=3D"1"><font size=3D"5"><br>
[evlog-dev] Libevlsyslog.so.1 cannot be preloaded</font></td></tr>
</table>

<table width=3D"100%" border=3D"0" cellspacing=3D"0" cellpadding=3D"0">=

<tr valign=3D"top"><td width=3D"50%"><img src=3D"cid:5__=3D07BBF8E0DFED=
[email protected]" width=3D"1" height=3D"1"></td><td width=3D=
"50%"><img src=3D"cid:[email protected]" w=
idth=3D"1" height=3D"1"></td></tr>
</table>
</td></tr>
</table>
<tt><font size=3D"6"><br>
I have installed the evlog 1.6.1 RPM on Red Hat Linux. &nbsp;I cannot g=
et<br>
syslog forwarding to work.<br>
I tried running /sbin/slog_fwd, but libevlsyslog.so.1 does not appear t=
o<br>
be in the RPM.<br>
I tried copying libevlsys.log.so.0.0.0 to libevlsyslog.so.1, so that<br=
>
slog_fwd can find it.<br>
When I do that, every command from then on gets at least one of the<br>=

following errors:<br>
<br>
ERROR: ld.so: object '/lib/libevlsyslog.so.1' from /etc/ld.so.preload<b=
r>
cannot be preloaded: ignored.<br>
<br>
Please help, the rest of evlog seems to work fine. &nbsp;I am not a Lin=
ux<br>
expert; I have no idea why it cannot be preloaded.<br>
<br>
Regards, Jeff<br>
<br>
<br>
-----------------------------------------------------------------------=
--<br>
Take Surveys. Earn Cash. Influence the Future of IT<br>
Join SourceForge.net's Techsay panel and you'll get the chance to share=
 your<br>
opinions on IT &amp; business topics through brief surveys - and earn c=
ash</font></tt><u><font size=3D"4" color=3D"#0000FF"><br>
</font></u><a href=3D"http://www.techsay.com/default.php?page=3Djoin.ph=
p&p=3Dsourceforge&CID=3DDEVDEV"><tt><u><font size=3D"6" color=3D"#0000F=
F">http://www.techsay.com/default.php?page=3Djoin.php&amp;p=3Dsourcefor=
ge&amp;CID=3DDEVDEV</font></u></tt></a><tt><font size=3D"6"><br>
_______________________________________________<br>
evlog-developers mailing list<br>
[email protected]</font></tt><u><font size=3D"4" c=
olor=3D"#0000FF"><br>
</font></u><a href=3D"https://lists.sourceforge.net/lists/listinfo/evlo=
g-developers"><tt><u><font size=3D"6" color=3D"#0000FF">https://lists.s=
ourceforge.net/lists/listinfo/evlog-developers</font></u></tt></a><font=
 size=3D"4"><br>
</font><br>
</body></html>=


--1__=07BBF8E0DFED32E18f9e8a93df938690918c07BBF8E0DFED32E1--


--0__=07BBF8E0DFED32E18f9e8a93df938690918c07BBF8E0DFED32E1
Content-type: image/gif; 
	name="graycol.gif"
Content-Disposition: inline; filename="graycol.gif"
Content-ID: <[email protected]>
Content-transfer-encoding: base64

R0lGODlhEAAQAKECAMzMzAAAAP///wAAACH5BAEAAAIALAAAAAAQABAAAAIXlI+py+0PopwxUbpu
ZRfKZ2zgSJbmSRYAIf4fT3B0aW1pemVkIGJ5IFVsZWFkIFNtYXJ0U2F2ZXIhAAA7

--0__=07BBF8E0DFED32E18f9e8a93df938690918c07BBF8E0DFED32E1
Content-type: image/gif; 
	name="pic31533.gif"
Content-Disposition: inline; filename="pic31533.gif"
Content-ID: <[email protected]>
Content-transfer-encoding: base64
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--0__=07BBF8E0DFED32E18f9e8a93df938690918c07BBF8E0DFED32E1
Content-type: image/gif; 
	name="ecblank.gif"
Content-Disposition: inline; filename="ecblank.gif"
Content-ID: <[email protected]>
Content-transfer-encoding: base64

R0lGODlhEAABAIAAAAAAAP///yH5BAEAAAEALAAAAAAQAAEAAAIEjI8ZBQA7

--0__=07BBF8E0DFED32E18f9e8a93df938690918c07BBF8E0DFED32E1
Content-type: image/gif; 
	name="29882245.gif"
Content-Disposition: inline; filename="29882245.gif"
Content-ID: <[email protected]>
Content-transfer-encoding: base64

R0lGODlhEAAQAKECAMzMzAAAAP///wAAACH5BAEAAAIALAAAAAAQABAAAAIXlI+py+0PopwxUbpu
ZRfKZ2zgSJbmSRYAIf4fT3B0aW1pemVkIGJ5IFVsZWFkIFNtYXJ0U2F2ZXIhAAA7

--0__=07BBF8E0DFED32E18f9e8a93df938690918c07BBF8E0DFED32E1
Content-type: image/gif; 
	name="29207710.gif"
Content-Disposition: inline; filename="29207710.gif"
Content-ID: <[email protected]>
Content-transfer-encoding: base64

R0lGODlhEAABAIAAAAAAAP///yH5BAEAAAEALAAAAAAQAAEAAAIEjI8ZBQA7

--0__=07BBF8E0DFED32E18f9e8a93df938690918c07BBF8E0DFED32E1--



--===============0777188611==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

-------------------------------------------------------------------------
Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.net's Techsay panel and you'll get the chance to share your
opinions on IT & business topics through brief surveys - and earn cash
http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV
--===============0777188611==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

_______________________________________________
evlog-developers mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/evlog-developers

--===============0777188611==--