Re: [evlog-dev] Libevlsyslog.so.1 cannot be preloaded
"Lanam, Jeff" <[email protected]> Tue, 30 Jan 2007 17:25:34 -0600
| Newsgroups | gmane.linux.kernel.event-logging |
|---|---|
| Message-ID | <86CD416093D1C8479B29D8ED49A22ED90152616E@G3W0066.americas.hpqcorp.net> |
This is a multi-part message in MIME format. --===============1043314207== Content-class: urn:content-classes:message Content-Type: multipart/related; type="multipart/alternative"; boundary="----_=_NextPart_001_01C744C5.F1619244" This is a multi-part message in MIME format. ------_=_NextPart_001_01C744C5.F1619244 Content-Type: multipart/alternative; boundary="----_=_NextPart_002_01C744C5.F1619244" ------_=_NextPart_002_01C744C5.F1619244 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Didn't see any difference. I tried running evlogd under gdb, and the "connection closed" message from ssh comes out before evlogd starts handling the event. =20 ________________________________ From: Hien Q Nguyen [mailto:[email protected]]=20 Sent: Tuesday, January 30, 2007 3:04 PM To: Lanam, Jeff Cc: [email protected] Subject: RE: [evlog-dev] Libevlsyslog.so.1 cannot be preloaded Can you try this? stop evlogd (/etc/init.d/evlog stop) start evlogd manually in foreground mode /sbin/evlogd -f and try ssh and telnet. Please let me know what happens. Regards, Hien. Hien Nguyen [email protected] Office : 503-578-4347 Mobile : 503-702-8814 "Lanam, Jeff" <[email protected]> "Lanam, Jeff" <[email protected]>=20 01/30/2007 11:17 AM =20 To Hien Q Nguyen/Beaverton/IBM@IBMUS, <[email protected]>=09 cc =09 Subject RE: [evlog-dev] Libevlsyslog.so.1 cannot be preloaded=09 =09 Thanks, but it didn't work. I did as you said, commenting out the authpriv.* line and restarting syslogd. Still get the connection rejected. There is a comment in libevlsyslog.c: /* We currently don't log AUTHPRIV */ This is followed by two lines which are commented out: // if (LOG_FAC(pri) << 3 =3D=3D LOG_AUTHPRIV) // return; The messages written to /var/log/secure do show up in evlog's privatelog, while forwarding is enabled. So I think something is happening later on. Regards, Jeff ________________________________ From: Hien Q Nguyen [mailto:[email protected]]=20 Sent: Tuesday, January 30, 2007 10:47 AM To: Lanam, Jeff; [email protected] Subject: RE: [evlog-dev] Libevlsyslog.so.1 cannot be preloaded Looks like the evlog forwarder either did not handling the LOG_AUTHPRIV correctly or not handling it at all. A work around comes to mind (you probably don't like it) is to comment out the authpriv.* line in the /etc/syslog.conf and re-start syslogd If ssh and telnet works when you comment out that line and restart syslogd, you can file a bug. If you have time, you can look in the libevlsyslog.c for the permanent fix :-) Thanks, Hien. Hien Nguyen [email protected] Office : 503-578-4347 Mobile : 503-702-8814 "Lanam, Jeff" <[email protected]> "Lanam, Jeff" <[email protected]>=20 01/30/2007 09:50 AM =20 To Hien Q Nguyen/Beaverton/IBM@IBMUS=09 =20 cc =09 =20 Subject RE: [evlog-dev] Libevlsyslog.so.1 cannot be preloaded=09 =09 I rebuilt all of evlog, in particular evlogd, for 64 bits. I deleted the old eventlog and privatelog and installed the rebuilt objects. Now everything seems to work, except that after I add libevlsyslog.so to the ld.so.preload file, any telnet or ssh to the system gets "Connection rejected." This of course is a big problem. Any ideas? Thanks much for your help. Regards, Jeff ________________________________ From: Hien Q Nguyen [mailto:[email protected] <mailto:[email protected]> ]=20 Sent: Monday, January 29, 2007 10:37 AM To: Lanam, Jeff Subject: RE: [evlog-dev] Libevlsyslog.so.1 cannot be preloaded=20 Sorry for the delay. I am currently quite busy with other project also I don't have access to a 64 bit machine (AMD). I will ask someone else look into this issue. The problem looks likes 64 bits vs 32 bits between glibc and syslogd and evlogd. Thanks Hien Nguyen [email protected] Office : 503-578-4347 Mobile : 503-702-8814 "Lanam, Jeff" <[email protected]> "Lanam, Jeff" <[email protected]>=20 01/26/2007 03:35 PM =20 To Hien Q Nguyen/Beaverton/IBM@IBMUS=09 =20 cc =09 =20 Subject RE: [evlog-dev] Libevlsyslog.so.1 cannot be preloaded=09 =09 Greetings. Sorry to keep pestering you. I was able to get past the Segmentation violation. The problem is that in libevlsyslog.c, _init is defined as (int argc, char *argv[], ...) Changing the parameter declaration to void, I get to the point of actually trying to write the event to evlog. Now I get an error in _evlSysWriteEx2, on the second write, the one that writes the data in buff. errno is 32, broken pipe, and when signals are turned back on, SIGPIPE is raised. It appears that evlogd is still running. Any suggestions? Regards, Jeff Lanam ________________________________ From: Lanam, Jeff=20 Sent: Wednesday, January 24, 2007 5:17 PM To: 'Hien Q Nguyen' Subject: RE: [evlog-dev] Libevlsyslog.so.1 cannot be preloaded Thank you for your reply last week. I did check libevlsyslog.conf. The only thing in it is "libc.so.6", which is in /lib, so that looks right. I have been able to get libevlsyslog to work on a Pentium system, straight from the RPM. The system I am failing on is an AMD64. I tried to rebuild libevlsyslog.so. I seem to get it built ok, but when I set LD_PRELOAD to reference it, every program I run gets Segmentation violation. Any hints on debugging this? I can't seem to get gdb to tell me anything. I try the following sequence: gdb set environment LD_PRELOAD=3D./libevlsyslog.so.1 break libevlsyslog.c:_init (this prompts me to make this a pending breakpoint) signal SIGSEGV stop file hello (which only has a printf in it, no calls to syslog) run I get the SIGSEGV before my program starts. The breakpoint never happened. There is no stack frame to display, so I cannot tell where it abended. Here is what gdb outputs: Program terminated with signal SIGSEGV, Segmentation fault. The program no longer exists. You can't do that without a process to debug. Any ideas? Thanks jeff ________________________________ From: Hien Q Nguyen [mailto:[email protected] <mailto:[email protected]> ]=20 Sent: Monday, January 15, 2007 3:24 PM To: Lanam, Jeff Cc: [email protected]; [email protected] Subject: Re: [evlog-dev] Libevlsyslog.so.1 cannot be preloaded=20 Check libevlsyslog.conf for the correct version of glibc. It that does not work, you may need to get the evlog source and build evlog on your system then copy libevlsyslog.so to /lib Hien Nguyen [email protected] "Lanam, Jeff" <[email protected]>=20 "Lanam, Jeff" <[email protected]>=20 Sent by: [email protected]=20 01/15/2007 01:54 PM =20 To <[email protected]>=09 =20 cc =09 =20 Subject [evlog-dev] Libevlsyslog.so.1 cannot be preloaded=09 =09 I have installed the evlog 1.6.1 RPM on Red Hat Linux. I cannot get syslog forwarding to work. I tried running /sbin/slog_fwd, but libevlsyslog.so.1 does not appear to be in the RPM. I tried copying libevlsys.log.so.0.0.0 to libevlsyslog.so.1, so that slog_fwd can find it. When I do that, every command from then on gets at least one of the following errors: ERROR: ld.so: object '/lib/libevlsyslog.so.1' from /etc/ld.so.preload cannot be preloaded: ignored. Please help, the rest of evlog seems to work fine. I am not a Linux expert; I have no idea why it cannot be preloaded. Regards, Jeff ------------------------------------------------------------------------ - Take Surveys. Earn Cash. Influence the Future of IT Join SourceForge.net's Techsay panel and you'll get the chance to share your opinions on IT & business topics through brief surveys - and earn cash http://www.techsay.com/default.php?page=3Djoin.php&p=3Dsourceforge&CID=3D= DEVDE V <http://www.techsay.com/default.php?page=3Djoin.php&p=3Dsourceforge&CID=3D= DEVD EV>=20 _______________________________________________ evlog-developers mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/evlog-developers <https://lists.sourceforge.net/lists/listinfo/evlog-developers>=20 ------_=_NextPart_002_01C744C5.F1619244 Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN"> <HTML><HEAD> <META http-equiv=3DContent-Type content=3D"text/html; = charset=3Dus-ascii"> <META content=3D"MSHTML 6.00.2900.3020" name=3DGENERATOR></HEAD> <BODY> <DIV dir=3Dltr align=3Dleft><SPAN class=3D696242223-30012007><FONT = face=3DArial=20 color=3D#0000ff size=3D2>Didn't see any difference. I tried = running evlogd=20 under gdb, and the "connection closed" message from ssh comes out before = evlogd=20 starts handling the event.</FONT></SPAN></DIV> <DIV dir=3Dltr align=3Dleft><SPAN class=3D696242223-30012007><FONT = face=3DArial=20 color=3D#0000ff size=3D2></FONT></SPAN> </DIV><BR> <DIV class=3DOutlookMessageHeader lang=3Den-us dir=3Dltr align=3Dleft> <HR tabIndex=3D-1> <FONT face=3DTahoma size=3D2><B>From:</B> Hien Q Nguyen = [mailto:[email protected]]=20 <BR><B>Sent:</B> Tuesday, January 30, 2007 3:04 PM<BR><B>To:</B> Lanam,=20 Jeff<BR><B>Cc:</B> = [email protected]<BR><B>Subject:</B> RE:=20 [evlog-dev] Libevlsyslog.so.1 cannot be preloaded<BR></FONT><BR></DIV> <DIV></DIV> <P><FONT size=3D4>Can you try this?<BR>stop evlogd (/etc/init.d/evlog=20 stop)<BR><BR>start evlogd manually in foreground mode<BR>/sbin/evlogd=20 -f<BR><BR>and try ssh and telnet.<BR>Please let me know what=20 happens.<BR><BR>Regards, Hien.</FONT><BR><BR>Hien=20 Nguyen<BR>[email protected]<BR>Office : 503-578-4347<BR>Mobile :=20 503-702-8814<BR><IMG height=3D16=20 alt=3D'Inactive hide details for "Lanam, Jeff" <[email protected]>'=20 src=3D"cid:696242223@30012007-261A" width=3D16 border=3D0>"Lanam, Jeff"=20 <[email protected]><BR><BR><BR> <TABLE cellSpacing=3D0 cellPadding=3D0 width=3D"100%" border=3D0> <TBODY> <TR vAlign=3Dtop> <TD=20 style=3D"BACKGROUND-IMAGE: = url(cid:[email protected]); = BACKGROUND-REPEAT: no-repeat"=20 width=3D"40%"> <UL> <UL> <UL> <UL><B><FONT size=3D2>"Lanam, Jeff"=20 <[email protected]></FONT></B><FONT size=3D2> = </FONT> <P><FONT size=3D2>01/30/2007 11:17 = AM</FONT></P></UL></UL></UL></UL></TD> <TD width=3D"60%"> <TABLE cellSpacing=3D0 cellPadding=3D0 width=3D"100%" border=3D0> <TBODY> <TR vAlign=3Dtop> <TD width=3D"1%"><IMG height=3D1 alt=3D""=20 src=3D"cid:696242223@30012007-2621" width=3D58 = border=3D0><BR> <DIV align=3Dright><FONT size=3D2>To</FONT></DIV></TD> <TD width=3D"100%"><IMG height=3D1 alt=3D""=20 src=3D"cid:696242223@30012007-2621" width=3D1 = border=3D0><BR><FONT=20 size=3D2>Hien Q Nguyen/Beaverton/IBM@IBMUS,=20 = <[email protected]></FONT></TD></TR> <TR vAlign=3Dtop> <TD width=3D"1%"><IMG height=3D1 alt=3D""=20 src=3D"cid:696242223@30012007-2621" width=3D58 = border=3D0><BR> <DIV align=3Dright><FONT size=3D2>cc</FONT></DIV></TD> <TD width=3D"100%"><IMG height=3D1 alt=3D""=20 src=3D"cid:696242223@30012007-2621" width=3D1 = border=3D0><BR></TD></TR> <TR vAlign=3Dtop> <TD width=3D"1%"><IMG height=3D1 alt=3D""=20 src=3D"cid:696242223@30012007-2621" width=3D58 = border=3D0><BR> <DIV align=3Dright><FONT size=3D2>Subject</FONT></DIV></TD> <TD width=3D"100%"><IMG height=3D1 alt=3D""=20 src=3D"cid:696242223@30012007-2621" width=3D1 = border=3D0><BR><FONT=20 size=3D2>RE: [evlog-dev] Libevlsyslog.so.1 cannot be=20 preloaded</FONT></TD></TR></TBODY></TABLE> <TABLE cellSpacing=3D0 cellPadding=3D0 border=3D0> <TBODY> <TR vAlign=3Dtop> <TD width=3D58><IMG height=3D1 alt=3D"" = src=3D"cid:696242223@30012007-2621"=20 width=3D1 border=3D0></TD> <TD width=3D336><IMG height=3D1 alt=3D"" = src=3D"cid:696242223@30012007-2621"=20 width=3D1 = border=3D0></TD></TR></TBODY></TABLE></TD></TR></TBODY></TABLE><BR><FONT = face=3DArial color=3D#0000ff>Thanks, but it didn't work. I did as you = said,=20 commenting out the authpriv.* line and restarting syslogd. Still get the = connection rejected.</FONT><BR><FONT size=3D4></FONT><BR><FONT = face=3DArial=20 color=3D#0000ff>There is a comment in libevlsyslog.c:</FONT><BR><FONT = face=3DArial=20 color=3D#0000ff>/* We currently don't log AUTHPRIV */</FONT><BR><FONT = face=3DArial=20 color=3D#0000ff>This is followed by two lines which are commented=20 out:</FONT><BR><FONT face=3DArial color=3D#0000ff>// if (LOG_FAC(pri) = << 3 =3D=3D=20 LOG_AUTHPRIV)</FONT><BR><FONT face=3DArial color=3D#0000ff>//=20 return;</FONT><BR><FONT size=3D4></FONT><BR><FONT face=3DArial = color=3D#0000ff>The=20 messages written to /var/log/secure do show up in evlog's privatelog, = while=20 forwarding is enabled. So I think something is happening later=20 on.</FONT><BR><FONT size=3D4></FONT><BR><FONT face=3DArial=20 color=3D#0000ff>Regards,</FONT><BR><FONT face=3DArial=20 color=3D#0000ff>Jeff</FONT><BR><FONT size=3D4></FONT><BR><BR> <HR align=3Dleft width=3D"100%" SIZE=3D2> <B><FONT face=3DTahoma>From:</FONT></B><FONT face=3DTahoma> Hien Q = Nguyen [<A=20 href=3D"mailto:[email protected]">mailto:[email protected]</A>]=20 </FONT><B><FONT face=3DTahoma><BR>Sent:</FONT></B><FONT face=3DTahoma> = Tuesday,=20 January 30, 2007 10:47 AM</FONT><B><FONT = face=3DTahoma><BR>To:</FONT></B><FONT=20 face=3DTahoma> Lanam, Jeff; = [email protected]</FONT><B><FONT=20 face=3DTahoma><BR>Subject:</FONT></B><FONT face=3DTahoma> RE: = [evlog-dev]=20 Libevlsyslog.so.1 cannot be preloaded</FONT><FONT size=3D4><BR></FONT> <P><FONT size=3D4>Looks like the evlog forwarder either did not handling = the=20 LOG_AUTHPRIV correctly or not handling it at all. A work around comes to = mind=20 (you probably don't like it) is to comment out the authpriv.* line in = the=20 /etc/syslog.conf and re-start syslogd<BR><BR>If ssh and telnet works = when you=20 comment out that line and restart syslogd, you can file a bug. If you = have time,=20 you can look in the libevlsyslog.c for the permanent fix = :-)<BR><BR>Thanks,=20 Hien.<BR><BR>Hien Nguyen<BR>[email protected]<BR>Office :=20 503-578-4347<BR>Mobile : 503-702-8814<BR></FONT><IMG height=3D16=20 alt=3D'Inactive hide details for "Lanam, Jeff" <[email protected]>'=20 src=3D"cid:696242223@30012007-2628" width=3D16><FONT size=3D4>"Lanam, = Jeff"=20 <[email protected]><BR><BR></FONT> <TABLE cellSpacing=3D0 cellPadding=3D0 width=3D"100%" border=3D0> <TBODY> <TR vAlign=3Dtop> <TD width=3D"50%"> <UL> <UL> <UL> <UL> <UL> <UL> <UL> <UL><B>"Lanam, Jeff" <[email protected]></B>=20 <P>01/30/2007 09:50 = AM</P></UL></UL></UL></UL></UL></UL></UL></UL></TD> <TD width=3D"50%"> <TABLE cellSpacing=3D0 cellPadding=3D0 width=3D"100%" border=3D0> <TBODY> <TR vAlign=3Dtop> <TD width=3D"17%"><IMG height=3D1 = src=3D"cid:696242223@30012007-262F"=20 width=3D58> <DIV align=3Dright>To</DIV></TD> <TD width=3D"83%"><IMG height=3D1 = src=3D"cid:696242223@30012007-262F"=20 width=3D1><BR>Hien Q Nguyen/Beaverton/IBM@IBMUS</TD></TR> <TR vAlign=3Dtop> <TD width=3D"17%"><IMG height=3D1 = src=3D"cid:696242223@30012007-262F"=20 width=3D58> <DIV align=3Dright>cc</DIV></TD> <TD width=3D"83%"><IMG height=3D1 = src=3D"cid:696242223@30012007-262F"=20 width=3D1></TD></TR> <TR vAlign=3Dtop> <TD width=3D"17%"><IMG height=3D1 = src=3D"cid:696242223@30012007-262F"=20 width=3D58> <DIV align=3Dright>Subject</DIV></TD> <TD width=3D"83%"><IMG height=3D1 = src=3D"cid:696242223@30012007-262F"=20 width=3D1><BR>RE: [evlog-dev] Libevlsyslog.so.1 cannot be=20 preloaded</TD></TR></TBODY></TABLE> <TABLE cellSpacing=3D0 cellPadding=3D0 width=3D"100%" border=3D0> <TBODY> <TR vAlign=3Dtop> <TD width=3D"15%"><IMG height=3D1 = src=3D"cid:696242223@30012007-262F"=20 width=3D1></TD> <TD width=3D"85%"><IMG height=3D1 = src=3D"cid:696242223@30012007-262F"=20 = width=3D1></TD></TR></TBODY></TABLE></TD></TR></TBODY></TABLE><FONT = face=3DArial=20 color=3D#0000ff size=3D4><BR>I rebuilt all of evlog, in particular = evlogd, for 64=20 bits. I deleted the old eventlog and privatelog and installed the = rebuilt=20 objects. Now everything seems to work, except that after I add = libevlsyslog.so=20 to the ld.so.preload file, any telnet or ssh to the system gets = "Connection=20 rejected." This of course is a big problem.</FONT><FONT = size=3D4><BR></FONT><FONT=20 face=3DArial color=3D#0000ff size=3D4><BR>Any ideas? Thanks much for = your=20 help.</FONT><FONT size=3D4><BR><BR></FONT><FONT face=3DArial = color=3D#0000ff=20 size=3D4><BR>Regards,<BR>Jeff</FONT><FONT size=3D4><BR><BR></FONT> <HR align=3Dleft width=3D"100%" SIZE=3D2> <B><FONT face=3DTahoma size=3D4>From:</FONT></B><FONT face=3DTahoma = size=3D4> Hien Q=20 Nguyen [</FONT><A href=3D"mailto:[email protected]"><U><FONT = face=3DTahoma=20 color=3D#0000ff size=3D4>mailto:[email protected]</FONT></U></A><FONT = face=3DTahoma=20 size=3D4>] </FONT><B><FONT face=3DTahoma = size=3D4><BR>Sent:</FONT></B><FONT=20 face=3DTahoma size=3D4> Monday, January 29, 2007 10:37 AM</FONT><B><FONT = face=3DTahoma=20 size=3D4><BR>To:</FONT></B><FONT face=3DTahoma size=3D4> Lanam, = Jeff</FONT><B><FONT=20 face=3DTahoma size=3D4><BR>Subject:</FONT></B><FONT face=3DTahoma = size=3D4> RE:=20 [evlog-dev] Libevlsyslog.so.1 cannot be preloaded</FONT>=20 <P><FONT size=3D5>Sorry for the delay. I am currently quite busy with = other=20 project also I don't have access to a 64 bit machine (AMD). I will ask = someone=20 else look into this issue. The problem looks likes 64 bits vs 32 bits = between=20 glibc and syslogd and evlogd.<BR><BR>Thanks<BR>Hien=20 Nguyen<BR>[email protected]<BR>Office : 503-578-4347<BR>Mobile :=20 503-702-8814</FONT><FONT size=3D4><BR></FONT><IMG height=3D16=20 alt=3D'Inactive hide details for "Lanam, Jeff" <[email protected]>'=20 src=3D"cid:696242223@30012007-2628" width=3D16><FONT size=3D5>"Lanam, = Jeff"=20 <[email protected]><BR></FONT> <TABLE cellSpacing=3D0 cellPadding=3D0 width=3D"100%" border=3D0> <TBODY> <TR vAlign=3Dtop> <TD width=3D"62%"> <UL> <UL> <UL> <UL> <UL> <UL> <UL> <UL> <UL> <UL> <UL> <UL> <UL> <UL> <UL> <UL><B><FONT size=3D4>"Lanam, Jeff"=20 = <[email protected]></FONT></B><FONT=20 size=3D4> </FONT> <P><FONT size=3D4>01/26/2007 03:35=20 = PM</FONT></P></UL></UL></UL></UL></UL></UL></UL></UL></UL></UL></UL></UL>= </UL></UL></UL></UL></TD> <TD width=3D"38%"> <TABLE cellSpacing=3D0 cellPadding=3D0 width=3D"100%" border=3D0> <TBODY> <TR vAlign=3Dtop> <TD width=3D"15%"><IMG height=3D1 = src=3D"cid:696242223@30012007-262F"=20 width=3D58> <DIV align=3Dright><FONT size=3D4>To</FONT></DIV></TD> <TD width=3D"85%"><IMG height=3D1 = src=3D"cid:696242223@30012007-262F"=20 width=3D1><FONT size=3D4><BR>Hien Q=20 Nguyen/Beaverton/IBM@IBMUS</FONT></TD></TR> <TR vAlign=3Dtop> <TD width=3D"15%"><IMG height=3D1 = src=3D"cid:696242223@30012007-262F"=20 width=3D58> <DIV align=3Dright><FONT size=3D4>cc</FONT></DIV></TD> <TD width=3D"85%"><IMG height=3D1 = src=3D"cid:696242223@30012007-262F"=20 width=3D1></TD></TR> <TR vAlign=3Dtop> <TD width=3D"15%"><IMG height=3D1 = src=3D"cid:696242223@30012007-262F"=20 width=3D58> <DIV align=3Dright><FONT size=3D4>Subject</FONT></DIV></TD> <TD width=3D"85%"><IMG height=3D1 = src=3D"cid:696242223@30012007-262F"=20 width=3D1><FONT size=3D4><BR>RE: [evlog-dev] = Libevlsyslog.so.1 cannot be=20 preloaded</FONT></TD></TR></TBODY></TABLE> <TABLE cellSpacing=3D0 cellPadding=3D0 width=3D"100%" border=3D0> <TBODY> <TR vAlign=3Dtop> <TD width=3D"50%"><IMG height=3D1 = src=3D"cid:696242223@30012007-262F"=20 width=3D1></TD> <TD width=3D"50%"><IMG height=3D1 = src=3D"cid:696242223@30012007-262F"=20 = width=3D1></TD></TR></TBODY></TABLE></TD></TR></TBODY></TABLE><FONT = face=3DArial=20 color=3D#0000ff size=3D5><BR><BR>Greetings. Sorry to keep pestering = you.<BR><BR>I=20 was able to get past the Segmentation violation. The problem is that in=20 libevlsyslog.c,<BR>_init is defined as (int argc, char *argv[], ...) = Changing=20 the parameter declaration to void, I get to the point of actually trying = to=20 write the event to evlog.<BR><BR>Now I get an error in _evlSysWriteEx2, = on the=20 second write, the one that writes the data in buff. errno is 32, broken = pipe,=20 and when signals are turned back on, SIGPIPE is raised. It appears that = evlogd=20 is still running. Any suggestions?<BR><BR>Regards,<BR>Jeff = Lanam</FONT><FONT=20 size=3D5><BR><BR><BR></FONT><FONT size=3D4><BR></FONT> <HR align=3Dleft width=3D"100%" SIZE=3D2> <B><FONT face=3DTahoma size=3D5>From:</FONT></B><FONT face=3DTahoma = size=3D5> Lanam,=20 Jeff </FONT><B><FONT face=3DTahoma size=3D5><BR>Sent:</FONT></B><FONT = face=3DTahoma=20 size=3D5> Wednesday, January 24, 2007 5:17 PM</FONT><B><FONT = face=3DTahoma=20 size=3D5><BR>To:</FONT></B><FONT face=3DTahoma size=3D5> 'Hien Q=20 Nguyen'</FONT><B><FONT face=3DTahoma = size=3D5><BR>Subject:</FONT></B><FONT=20 face=3DTahoma size=3D5> RE: [evlog-dev] Libevlsyslog.so.1 cannot be=20 preloaded</FONT><FONT face=3DArial color=3D#0000ff = size=3D5><BR><BR>Thank you for your=20 reply last week. I did check libevlsyslog.conf. The only thing in it is=20 "libc.so.6", which is in /lib, so that looks right.<BR><BR>I have been = able to=20 get libevlsyslog to work on a Pentium system, straight from the RPM. The = system=20 I am failing on is an AMD64. I tried to rebuild libevlsyslog.so. I seem = to get=20 it built ok, but when I set LD_PRELOAD to reference it, every program I = run gets=20 Segmentation violation.<BR><BR>Any hints on debugging this? I can't seem = to get=20 gdb to tell me anything.<BR><BR>I try the following = sequence:<BR>gdb<BR>set=20 environment LD_PRELOAD=3D./libevlsyslog.so.1<BR>break = libevlsyslog.c:_init (this=20 prompts me to make this a pending breakpoint)<BR>signal SIGSEGV = stop<BR>file=20 hello (which only has a printf in it, no calls to = syslog)<BR>run<BR><BR>I get=20 the SIGSEGV before my program starts. The breakpoint never happened. = There is no=20 stack frame to display, so I cannot tell where it abended.<BR>Here is = what gdb=20 outputs:<BR>Program terminated with signal SIGSEGV, Segmentation = fault.<BR>The=20 program no longer exists.<BR>You can't do that without a process to=20 debug.<BR><BR>Any ideas?<BR><BR>Thanks<BR>jeff</FONT><FONT=20 size=3D5><BR></FONT><FONT size=3D4><BR></FONT> <HR align=3Dleft width=3D"100%" SIZE=3D2> <B><FONT face=3DTahoma size=3D5>From:</FONT></B><FONT face=3DTahoma = size=3D5> Hien Q=20 Nguyen [</FONT><A href=3D"mailto:[email protected]"><U><FONT = face=3DTahoma=20 color=3D#0000ff size=3D5>mailto:[email protected]</FONT></U></A><FONT = face=3DTahoma=20 size=3D5>] </FONT><B><FONT face=3DTahoma = size=3D5><BR>Sent:</FONT></B><FONT=20 face=3DTahoma size=3D5> Monday, January 15, 2007 3:24 PM</FONT><B><FONT = face=3DTahoma=20 size=3D5><BR>To:</FONT></B><FONT face=3DTahoma size=3D5> Lanam, = Jeff</FONT><B><FONT=20 face=3DTahoma size=3D5><BR>Cc:</FONT></B><FONT face=3DTahoma size=3D5>=20 [email protected];=20 [email protected]</FONT><B><FONT = face=3DTahoma=20 size=3D5><BR>Subject:</FONT></B><FONT face=3DTahoma size=3D5> Re: = [evlog-dev]=20 Libevlsyslog.so.1 cannot be preloaded</FONT><FONT size=3D4> </FONT> <P><FONT size=3D7>Check libevlsyslog.conf for the correct version of = glibc. It=20 that does not work, you may need to get the evlog source and build evlog = on your=20 system then copy libevlsyslog.so to /lib</FONT><FONT = size=3D6><BR><BR><BR>Hien=20 Nguyen<BR>[email protected]</FONT><FONT size=3D5><BR></FONT><FONT=20 size=3D4><BR></FONT><IMG height=3D16=20 alt=3D'Inactive hide details for "Lanam, Jeff" <[email protected]>'=20 src=3D"cid:696242223@30012007-2628" width=3D16><FONT size=3D6>"Lanam, = Jeff"=20 <[email protected]></FONT>=20 <TABLE cellSpacing=3D0 cellPadding=3D0 width=3D"100%" border=3D0> <TBODY> <TR vAlign=3Dtop> <TD width=3D"70%"> <UL> <UL> <UL> <UL> <UL> <UL> <UL> <UL> <UL> <UL> <UL> <UL> <UL> <UL> <UL> <UL> <UL> <UL> <UL> <UL> <UL> <UL> <UL> <UL> <UL> <UL> <UL> <UL> <UL> <UL> <UL> <UL><B><FONT size=3D5>"Lanam, Jeff"=20 = <[email protected]></FONT></B><FONT=20 size=3D5> <BR>Sent by:=20 = [email protected]</FONT><FONT=20 size=3D6> </FONT> <P><FONT size=3D5>01/15/2007 01:54=20 = PM</FONT></P></UL></UL></UL></UL></UL></UL></UL></UL></UL></UL></UL></UL>= </UL></UL></UL></UL></UL></UL></UL></UL></UL></UL></UL></UL></UL></UL></U= L></UL></UL></UL></UL></UL></TD> <TD width=3D"30%"> <TABLE cellSpacing=3D0 cellPadding=3D0 width=3D"100%" border=3D0> <TBODY> <TR vAlign=3Dtop> <TD width=3D"17%"><IMG height=3D1 = src=3D"cid:696242223@30012007-262F"=20 width=3D58> <DIV align=3Dright><FONT size=3D5>To</FONT></DIV></TD> <TD width=3D"83%"><IMG height=3D1 = src=3D"cid:696242223@30012007-262F"=20 width=3D1><FONT=20 = size=3D5><BR><[email protected]></FONT></TD></= TR> <TR vAlign=3Dtop> <TD width=3D"17%"><IMG height=3D1 = src=3D"cid:696242223@30012007-262F"=20 width=3D58> <DIV align=3Dright><FONT size=3D5>cc</FONT></DIV></TD> <TD width=3D"83%"><IMG height=3D1 = src=3D"cid:696242223@30012007-262F"=20 width=3D1></TD></TR> <TR vAlign=3Dtop> <TD width=3D"17%"><IMG height=3D1 = src=3D"cid:696242223@30012007-262F"=20 width=3D58> <DIV align=3Dright><FONT size=3D5>Subject</FONT></DIV></TD> <TD width=3D"83%"><IMG height=3D1 = src=3D"cid:696242223@30012007-262F"=20 width=3D1><FONT size=3D5><BR>[evlog-dev] Libevlsyslog.so.1 = cannot be=20 preloaded</FONT></TD></TR></TBODY></TABLE> <TABLE cellSpacing=3D0 cellPadding=3D0 width=3D"100%" border=3D0> <TBODY> <TR vAlign=3Dtop> <TD width=3D"50%"><IMG height=3D1 = src=3D"cid:696242223@30012007-262F"=20 width=3D1></TD> <TD width=3D"50%"><IMG height=3D1 = src=3D"cid:696242223@30012007-262F"=20 = width=3D1></TD></TR></TBODY></TABLE></TD></TR></TBODY></TABLE><TT><FONT=20 size=3D6><BR>I have installed the evlog 1.6.1 RPM on Red Hat Linux. = I cannot=20 get<BR>syslog forwarding to work.<BR>I tried running /sbin/slog_fwd, but = libevlsyslog.so.1 does not appear to<BR>be in the RPM.<BR>I tried = copying=20 libevlsys.log.so.0.0.0 to libevlsyslog.so.1, so that<BR>slog_fwd can = find=20 it.<BR>When I do that, every command from then on gets at least one of=20 the<BR>following errors:<BR><BR>ERROR: ld.so: object = '/lib/libevlsyslog.so.1'=20 from /etc/ld.so.preload<BR>cannot be preloaded: ignored.<BR><BR>Please = help, the=20 rest of evlog seems to work fine. I am not a Linux<BR>expert; I = have no=20 idea why it cannot be preloaded.<BR><BR>Regards,=20 Jeff<BR><BR><BR>---------------------------------------------------------= ----------------<BR>Take=20 Surveys. Earn Cash. Influence the Future of IT<BR>Join SourceForge.net's = Techsay=20 panel and you'll get the chance to share your<BR>opinions on IT & = business=20 topics through brief surveys - and earn cash</FONT></TT><U><FONT = color=3D#0000ff=20 size=3D4><BR></FONT></U><A=20 href=3D"http://www.techsay.com/default.php?page=3Djoin.php&p=3Dsource= forge&CID=3DDEVDEV"><TT><U><FONT=20 color=3D#0000ff=20 size=3D6>http://www.techsay.com/default.php?page=3Djoin.php&p=3Dsourc= eforge&CID=3DDEVDEV</FONT></U></TT></A><TT><FONT=20 size=3D6><BR>_______________________________________________<BR>evlog-dev= elopers=20 mailing = list<BR>[email protected]</FONT></TT><U><FONT=20 color=3D#0000ff size=3D4><BR></FONT></U><A=20 href=3D"https://lists.sourceforge.net/lists/listinfo/evlog-developers"><T= T><U><FONT=20 color=3D#0000ff=20 size=3D6>https://lists.sourceforge.net/lists/listinfo/evlog-developers</F= ONT></U></TT></A><FONT=20 size=3D4><BR></FONT><BR></P></BODY></HTML> ------_=_NextPart_002_01C744C5.F1619244-- ------_=_NextPart_001_01C744C5.F1619244 Content-Type: image/gif; name="graycol.gif" Content-Transfer-Encoding: base64 Content-ID: <696242223@30012007-261A> Content-Description: graycol.gif Content-Location: graycol.gif R0lGODlhEAAQAKECAMzMzAAAAP///wAAACH5BAEAAAIALAAAAAAQABAAAAIXlI+py+0PopwxUbpu ZRfKZ2zgSJbmSRYAIf4fT3B0aW1pemVkIGJ5IFVsZWFkIFNtYXJ0U2F2ZXIhAAA7 ------_=_NextPart_001_01C744C5.F1619244 Content-Type: image/gif; name="ecblank.gif" Content-Transfer-Encoding: base64 Content-ID: <696242223@30012007-2621> Content-Description: ecblank.gif Content-Location: ecblank.gif R0lGODlhEAABAIAAAAAAAP///yH5BAEAAAEALAAAAAAQAAEAAAIEjI8ZBQA7 ------_=_NextPart_001_01C744C5.F1619244 Content-Type: image/gif; name="14081488.gif" Content-Transfer-Encoding: base64 Content-ID: <696242223@30012007-2628> Content-Description: 14081488.gif Content-Location: 14081488.gif R0lGODlhEAAQAKECAMzMzAAAAP///wAAACH5BAEAAAIALAAAAAAQABAAAAIXlI+py+0PopwxUbpu ZRfKZ2zgSJbmSRYAIf4fT3B0aW1pemVkIGJ5IFVsZWFkIFNtYXJ0U2F2ZXIhAAA7 ------_=_NextPart_001_01C744C5.F1619244 Content-Type: image/gif; name="14292455.gif" Content-Transfer-Encoding: base64 Content-ID: <696242223@30012007-262F> Content-Description: 14292455.gif Content-Location: 14292455.gif R0lGODlhEAABAIAAAAAAAP///yH5BAEAAAEALAAAAAAQAAEAAAIEjI8ZBQA7 ------_=_NextPart_001_01C744C5.F1619244-- --===============1043314207== Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline ------------------------------------------------------------------------- Take Surveys. Earn Cash. Influence the Future of IT Join SourceForge.net's Techsay panel and you'll get the chance to share your opinions on IT & business topics through brief surveys - and earn cash http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV --===============1043314207== Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline _______________________________________________ evlog-developers mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/evlog-developers --===============1043314207==--