Re: [evlog-dev] Libevlsyslog.so.1 cannot be preloaded
Hien Q Nguyen <[email protected]> Tue, 30 Jan 2007 15:50:46 -0800
| Newsgroups | gmane.linux.kernel.event-logging |
|---|---|
| Message-ID | <OF573770D1.D86CCC9B-ON88257273.0082D1C8-88257273.0082FDE1@us.ibm.com> |
--===============1862593467== Content-type: multipart/related; Boundary="0__=07BBF8E0DF1157588f9e8a93df938690918c07BBF8E0DF115758" --0__=07BBF8E0DF1157588f9e8a93df938690918c07BBF8E0DF115758 Content-type: multipart/alternative; Boundary="1__=07BBF8E0DF1157588f9e8a93df938690918c07BBF8E0DF115758" --1__=07BBF8E0DF1157588f9e8a93df938690918c07BBF8E0DF115758 Content-type: text/plain; charset=US-ASCII Content-transfer-encoding: quoted-printable I am going to look into this. Thanks, Hien. Hien Nguyen [email protected] Office : 503-578-4347 Mobile : 503-702-8814 = "Lanam, Jeff" = <[email protected] = m> = To Sent by: Hien Q Nguyen/Beaverton/IBM@IBMU= S evlog-developers- = cc [email protected] [email protected]= ge. rceforge.net net = Subj= ect Re: [evlog-dev] Libevlsyslog.so.= 1 01/30/2007 03:25 cannot be preloaded = PM = = = = = = Didn't see any difference. I tried running evlogd under gdb, and the "connection closed" message from ssh comes out before evlogd starts handling the event. From: Hien Q Nguyen [mailto:[email protected]] Sent: Tuesday, January 30, 2007 3:04 PM To: Lanam, Jeff Cc: [email protected] Subject: RE: [evlog-dev] Libevlsyslog.so.1 cannot be preloaded Can you try this? stop evlogd (/etc/init.d/evlog stop) start evlogd manually in foreground mode /sbin/evlogd -f and try ssh and telnet. Please let me know what happens. Regards, Hien. Hien Nguyen [email protected] Office : 503-578-4347 Mobile : 503-702-8814 Inactive hide details for "Lanam, Jeff" <[email protected]>"Lanam, Jeff= " <[email protected]> = "Lanam, = Jeff" = <jeff.l = anam@hp = .com> = To = Hien Q = 01/30/2 Nguyen/Beaverton/IBM@IBMUS, = 007 <[email protected]= efo 11:17 rge.ne> = AM = = cc = = Subj= ect = RE: [evlog-dev] = Libevlsyslog.so.1 cannot be = preloaded = = = = = = = Thanks, but it didn't work. I did as you said, commenting out the authpriv.* line and restarting syslogd. Still get the connection reject= ed. There is a comment in libevlsyslog.c: /* We currently don't log AUTHPRIV */ This is followed by two lines which are commented out: // if (LOG_FAC(pri) << 3 =3D=3D LOG_AUTHPRIV) // return; The messages written to /var/log/secure do show up in evlog's privatelo= g, while forwarding is enabled. So I think something is happening later on= . Regards, Jeff From: Hien Q Nguyen [mailto:[email protected]] Sent: Tuesday, January 30, 2007 10:47 AM To: Lanam, Jeff; [email protected] Subject: RE: [evlog-dev] Libevlsyslog.so.1 cannot be preloaded Looks like the evlog forwarder either did not handling the LOG_AUTHPRIV= correctly or not handling it at all. A work around comes to mind (you probably don't like it) is to comment out the authpriv.* line in the /etc/syslog.conf and re-start syslogd If ssh and telnet works when you comment out that line and restart sysl= ogd, you can file a bug. If you have time, you can look in the libevlsyslog.= c for the permanent fix :-) Thanks, Hien. Hien Nguyen [email protected] Office : 503-578-4347 Mobile : 503-702-8814 Inactive hide details for "Lanam, Jeff" <[email protected]>"Lanam, Jeff= " <[email protected]> = "Lanam, Jeff" <[email protected]> = = = 01/30/2007 09:50 AM = = To = Hien Q = Nguyen/Beaverton= /IB M@IBMUS = = = cc = = Subj= ect = RE: [evlog-dev] = Libevlsyslog.so.= 1 cannot be preloa= ded = = = = = = I rebuilt all of evlog, in particular evlogd, for 64 bits. I deleted th= e old eventlog and privatelog and installed the rebuilt objects. Now everything seems to work, except that after I add libevlsyslog.so to th= e ld.so.preload file, any telnet or ssh to the system gets "Connection rejected." This of course is a big problem. Any ideas? Thanks much for your help. Regards, Jeff From: Hien Q Nguyen [mailto:[email protected]] Sent: Monday, January 29, 2007 10:37 AM To: Lanam, Jeff Subject: RE: [evlog-dev] Libevlsyslog.so.1 cannot be preloaded Sorry for the delay. I am currently quite busy with other project also = I don't have access to a 64 bit machine (AMD). I will ask someone else lo= ok into this issue. The problem looks likes 64 bits vs 32 bits between gli= bc and syslogd and evlogd. Thanks Hien Nguyen [email protected] Office : 503-578-4347 Mobile : 503-702-8814 Inactive hide details for "Lanam, Jeff" <[email protected]>"Lanam, Jeff= " <[email protected]> = "Lanam, = Jeff" = <jeff.lana = [email protected]> = = To = 01/26/2007 Hien Q = 03:35 PM Nguyen/Be= ave rton/IBM@= IBM US = = = cc = = Subj= ect = RE: = [evlog-de= v] Libevlsys= log .so.1 can= not be preloa= ded = = = = = = Greetings. Sorry to keep pestering you. I was able to get past the Segmentation violation. The problem is that = in libevlsyslog.c, _init is defined as (int argc, char *argv[], ...) Changing the paramete= r declaration to void, I get to the point of actually trying to write the= event to evlog. Now I get an error in _evlSysWriteEx2, on the second write, the one tha= t writes the data in buff. errno is 32, broken pipe, and when signals are= turned back on, SIGPIPE is raised. It appears that evlogd is still runn= ing. Any suggestions? Regards, Jeff Lanam From: Lanam, Jeff Sent: Wednesday, January 24, 2007 5:17 PM To: 'Hien Q Nguyen' Subject: RE: [evlog-dev] Libevlsyslog.so.1 cannot be preloaded Thank you for your reply last week. I did check libevlsyslog.conf. The = only thing in it is "libc.so.6", which is in /lib, so that looks right. I have been able to get libevlsyslog to work on a Pentium system, strai= ght from the RPM. The system I am failing on is an AMD64. I tried to rebuil= d libevlsyslog.so. I seem to get it built ok, but when I set LD_PRELOAD t= o reference it, every program I run gets Segmentation violation. Any hints on debugging this? I can't seem to get gdb to tell me anythin= g. I try the following sequence: gdb set environment LD_PRELOAD=3D./libevlsyslog.so.1 break libevlsyslog.c:_init (this prompts me to make this a pending breakpoint) signal SIGSEGV stop file hello (which only has a printf in it, no calls to syslog) run I get the SIGSEGV before my program starts. The breakpoint never happen= ed. There is no stack frame to display, so I cannot tell where it abended. Here is what gdb outputs: Program terminated with signal SIGSEGV, Segmentation fault. The program no longer exists. You can't do that without a process to debug. Any ideas? Thanks jeff From: Hien Q Nguyen [mailto:[email protected]] Sent: Monday, January 15, 2007 3:24 PM To: Lanam, Jeff Cc: [email protected]; [email protected] Subject: Re: [evlog-dev] Libevlsyslog.so.1 cannot be preloaded Check libevlsyslog.conf for the correct version of glibc. It that does = not work, you may need to get the evlog source and build evlog on your syst= em then copy libevlsyslog.so to /lib Hien Nguyen [email protected] Inactive hide details for "Lanam, Jeff" <[email protected]>"Lanam, Jeff= " <[email protected]> = "Lanam, = Jeff" = <jeff.lan = [email protected] = > = To Sent by: = evlog-dev = <ev elopers-b = log ounces@li = -de sts.sourc = vel eforge.ne = ope t = rs@ = lis = ts. 01/15/200 = sou 7 01:54 = rce PM = for = ge. = net = > = = cc = = Su= bje = ct = = [ev = log = -de = v] = Lib = evl = sys = log = .so = .1 = can = not = be = pre = loa = ded = = = = = = I have installed the evlog 1.6.1 RPM on Red Hat Linux. I cannot get syslog forwarding to work. I tried running /sbin/slog_fwd, but libevlsyslog.so.1 does not appear t= o be in the RPM. I tried copying libevlsys.log.so.0.0.0 to libevlsyslog.so.1, so that slog_fwd can find it. When I do that, every command from then on gets at least one of the following errors: ERROR: ld.so: object '/lib/libevlsyslog.so.1' from /etc/ld.so.preload cannot be preloaded: ignored. Please help, the rest of evlog seems to work fine. I am not a Linux expert; I have no idea why it cannot be preloaded. Regards, Jeff -----------------------------------------------------------------------= -- Take Surveys. Earn Cash. Influence the Future of IT Join SourceForge.net's Techsay panel and you'll get the chance to share= your opinions on IT & business topics through brief surveys - and earn cash http://www.techsay.com/default.php?page=3Djoin.php&p=3Dsourceforge&CID=3D= DEVDEV _______________________________________________ evlog-developers mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/evlog-developers -----------------------------------------------------------------------= -- Take Surveys. Earn Cash. Influence the Future of IT Join SourceForge.net's Techsay panel and you'll get the chance to share= your opinions on IT & business topics through brief surveys - and earn cash http://www.techsay.com/default.php?page=3Djoin.php&p=3Dsourceforge&CID=3D= DEVDEV _______________________________________________ evlog-developers mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/evlog-developers = --1__=07BBF8E0DF1157588f9e8a93df938690918c07BBF8E0DF115758 Content-type: text/html; charset=US-ASCII Content-Disposition: inline Content-transfer-encoding: quoted-printable <html><body> <p>I am going to look into this.<br> <br> Thanks, Hien.<br> <br> Hien Nguyen<br> [email protected]<br> Office : 503-578-4347<br> Mobile : 503-702-8814<br> <img width=3D"16" height=3D"16" src=3D"cid:1__=3D07BBF8E0DF1157588f9e8a= [email protected]" border=3D"0" alt=3D"Inactive hide details for "= ;Lanam, Jeff" <[email protected]>">"Lanam, Jeff" &= lt;[email protected]><br> <br> <br> <table width=3D"100%" border=3D"0" cellspacing=3D"0" cellpadding=3D"0">= <tr valign=3D"top"><td style=3D"background-image:url(cid:2__=3D07BBF8E0= [email protected]); background-repeat: no-repeat; " widt= h=3D"40%"> <ul> <ul> <ul> <ul><b><font size=3D"2">"Lanam, Jeff" <[email protected]&g= t;</font></b><font size=3D"2"> </font><br> <font size=3D"2">Sent by: [email protected]= t</font> <p><font size=3D"2">01/30/2007 03:25 PM</font></ul> </ul> </ul> </ul> </td><td width=3D"60%"> <table width=3D"100%" border=3D"0" cellspacing=3D"0" cellpadding=3D"0">= <tr valign=3D"top"><td width=3D"1%"><img width=3D"58" height=3D"1" src=3D= "cid:[email protected]" border=3D"0" alt=3D= ""><br> <div align=3D"right"><font size=3D"2">To</font></div></td><td width=3D"= 100%"><img width=3D"1" height=3D"1" src=3D"cid:3__=3D07BBF8E0DF1157588f= [email protected]" border=3D"0" alt=3D""><br> <font size=3D"2">Hien Q Nguyen/Beaverton/IBM@IBMUS</font></td></tr> <tr valign=3D"top"><td width=3D"1%"><img width=3D"58" height=3D"1" src=3D= "cid:[email protected]" border=3D"0" alt=3D= ""><br> <div align=3D"right"><font size=3D"2">cc</font></div></td><td width=3D"= 100%"><img width=3D"1" height=3D"1" src=3D"cid:3__=3D07BBF8E0DF1157588f= [email protected]" border=3D"0" alt=3D""><br> <font size=3D"2">[email protected]</font></td></tr= > <tr valign=3D"top"><td width=3D"1%"><img width=3D"58" height=3D"1" src=3D= "cid:[email protected]" border=3D"0" alt=3D= ""><br> <div align=3D"right"><font size=3D"2">Subject</font></div></td><td widt= h=3D"100%"><img width=3D"1" height=3D"1" src=3D"cid:3__=3D07BBF8E0DF115= [email protected]" border=3D"0" alt=3D""><br> <font size=3D"2">Re: [evlog-dev] Libevlsyslog.so.1 cannot be preloaded<= /font></td></tr> </table> <table border=3D"0" cellspacing=3D"0" cellpadding=3D"0"> <tr valign=3D"top"><td width=3D"58"><img width=3D"1" height=3D"1" src=3D= "cid:[email protected]" border=3D"0" alt=3D= ""></td><td width=3D"336"><img width=3D"1" height=3D"1" src=3D"cid:3__=3D= [email protected]" border=3D"0" alt=3D""></td></= tr> </table> </td></tr> </table> <br> <font color=3D"#0000FF" face=3D"Arial">Didn't see any difference. I tr= ied running evlogd under gdb, and the "connection closed" mes= sage from ssh comes out before evlogd starts handling the event.</font>= <br> <font size=3D"4"> </font><br> <br> <hr width=3D"100%" size=3D"2" align=3D"left"><b><font face=3D"Tahoma">F= rom:</font></b><font face=3D"Tahoma"> Hien Q Nguyen [<a href=3D"mailto:= [email protected]">mailto:[email protected]</a>] </font><b><font fa= ce=3D"Tahoma"><br> Sent:</font></b><font face=3D"Tahoma"> Tuesday, January 30, 2007 3:04 P= M</font><b><font face=3D"Tahoma"><br> To:</font></b><font face=3D"Tahoma"> Lanam, Jeff</font><b><font face=3D= "Tahoma"><br> Cc:</font></b><font face=3D"Tahoma"> [email protected]= .net</font><b><font face=3D"Tahoma"><br> Subject:</font></b><font face=3D"Tahoma"> RE: [evlog-dev] Libevlsyslog.= so.1 cannot be preloaded</font><font size=3D"4"><br> </font> <p><font size=3D"5">Can you try this?<br> stop evlogd (/etc/init.d/evlog stop)<br> <br> start evlogd manually in foreground mode<br> /sbin/evlogd -f<br> <br> and try ssh and telnet.<br> Please let me know what happens.<br> <br> Regards, Hien.</font><font size=3D"4"><br> <br> Hien Nguyen<br> [email protected]<br> Office : 503-578-4347<br> Mobile : 503-702-8814<br> </font><img src=3D"cid:[email protected]" = width=3D"16" height=3D"16" alt=3D"Inactive hide details for "Lanam= , Jeff" <[email protected]>"><font size=3D"4">"Lanam, J= eff" <[email protected]><br> <br> </font> <table width=3D"100%" border=3D"0" cellspacing=3D"0" cellpadding=3D"0">= <tr valign=3D"top"><td width=3D"44%"> <ul> <ul> <ul> <ul> <ul> <ul> <ul> <ul><b>"Lanam, Jeff" <[email protected]></b> <p>01/30/2007 11:17 AM</ul> </ul> </ul> </ul> </ul> </ul> </ul> </ul> </td><td width=3D"56%"> <table width=3D"100%" border=3D"0" cellspacing=3D"0" cellpadding=3D"0">= <tr valign=3D"top"><td width=3D"11%"><img src=3D"cid:5__=3D07BBF8E0DF11= [email protected]" width=3D"58" height=3D"1"><div align=3D"r= ight">To</div></td><td width=3D"89%"><img src=3D"cid:5__=3D07BBF8E0DF11= [email protected]" width=3D"1" height=3D"1"><br> Hien Q Nguyen/Beaverton/IBM@IBMUS, <[email protected]= ge.ne></td></tr> <tr valign=3D"top"><td width=3D"11%"><img src=3D"cid:5__=3D07BBF8E0DF11= [email protected]" width=3D"58" height=3D"1"><div align=3D"r= ight">cc</div></td><td width=3D"89%"><img src=3D"cid:5__=3D07BBF8E0DF11= [email protected]" width=3D"1" height=3D"1"></td></tr> <tr valign=3D"top"><td width=3D"11%"><img src=3D"cid:5__=3D07BBF8E0DF11= [email protected]" width=3D"58" height=3D"1"><div align=3D"r= ight">Subject</div></td><td width=3D"89%"><img src=3D"cid:5__=3D07BBF8E= [email protected]" width=3D"1" height=3D"1"><br> RE: [evlog-dev] Libevlsyslog.so.1 cannot be preloaded</td></tr> </table> <table width=3D"100%" border=3D"0" cellspacing=3D"0" cellpadding=3D"0">= <tr valign=3D"top"><td width=3D"15%"><img src=3D"cid:5__=3D07BBF8E0DF11= [email protected]" width=3D"1" height=3D"1"></td><td width=3D= "85%"><img src=3D"cid:[email protected]" w= idth=3D"1" height=3D"1"></td></tr> </table> </td></tr> </table> <font size=3D"4" color=3D"#0000FF" face=3D"Arial"><br> Thanks, but it didn't work. I did as you said, commenting out the authp= riv.* line and restarting syslogd. Still get the connection rejected.</= font><font size=3D"4"><br> </font><font size=3D"4" color=3D"#0000FF" face=3D"Arial"><br> There is a comment in libevlsyslog.c:<br> /* We currently don't log AUTHPRIV */<br> This is followed by two lines which are commented out:<br> // if (LOG_FAC(pri) << 3 =3D=3D LOG_AUTHPRIV)<br> // return;</font><font size=3D"4"><br> </font><font size=3D"4" color=3D"#0000FF" face=3D"Arial"><br> The messages written to /var/log/secure do show up in evlog's privatelo= g, while forwarding is enabled. So I think something is happening later= on.</font><font size=3D"4"><br> </font><font size=3D"4" color=3D"#0000FF" face=3D"Arial"><br> Regards,<br> Jeff</font><font size=3D"4"><br> <br> <br> </font><hr width=3D"100%" size=3D"2" align=3D"left"><b><font size=3D"4"= face=3D"Tahoma">From:</font></b><font size=3D"4" face=3D"Tahoma"> Hien= Q Nguyen [</font><a href=3D"mailto:[email protected]"><u><font size=3D= "4" color=3D"#0000FF" face=3D"Tahoma">mailto:[email protected]</font>= </u></a><font size=3D"4" face=3D"Tahoma">] </font><b><font size=3D"4" f= ace=3D"Tahoma"><br> Sent:</font></b><font size=3D"4" face=3D"Tahoma"> Tuesday, January 30, = 2007 10:47 AM</font><b><font size=3D"4" face=3D"Tahoma"><br> To:</font></b><font size=3D"4" face=3D"Tahoma"> Lanam, Jeff; evlog-deve= [email protected]</font><b><font size=3D"4" face=3D"Tahoma"><= br> Subject:</font></b><font size=3D"4" face=3D"Tahoma"> RE: [evlog-dev] Li= bevlsyslog.so.1 cannot be preloaded</font> <p><font size=3D"5">Looks like the evlog forwarder either did not handl= ing the LOG_AUTHPRIV correctly or not handling it at all. A work around= comes to mind (you probably don't like it) is to comment out the authp= riv.* line in the /etc/syslog.conf and re-start syslogd<br> <br> If ssh and telnet works when you comment out that line and restart sysl= ogd, you can file a bug. If you have time, you can look in the libevlsy= slog.c for the permanent fix :-)<br> <br> Thanks, Hien.<br> <br> Hien Nguyen<br> [email protected]<br> Office : 503-578-4347<br> Mobile : 503-702-8814</font><font size=3D"4"><br> </font><img src=3D"cid:[email protected]" = width=3D"16" height=3D"16" alt=3D"Inactive hide details for "Lanam= , Jeff" <[email protected]>"><font size=3D"5">"Lanam, J= eff" <[email protected]><br> </font> <table width=3D"100%" border=3D"0" cellspacing=3D"0" cellpadding=3D"0">= <tr valign=3D"top"><td width=3D"62%"> <ul> <ul> <ul> <ul> <ul> <ul> <ul> <ul> <ul> <ul> <ul> <ul> <ul> <ul> <ul> <ul><b><font size=3D"4">"Lanam, Jeff" <[email protected]&g= t;</font></b><font size=3D"4"> </font> <p><font size=3D"4">01/30/2007 09:50 AM</font></ul> </ul> </ul> </ul> </ul> </ul> </ul> </ul> </ul> </ul> </ul> </ul> </ul> </ul> </ul> </ul> </td><td width=3D"38%"> <table width=3D"100%" border=3D"0" cellspacing=3D"0" cellpadding=3D"0">= <tr valign=3D"top"><td width=3D"15%"><img src=3D"cid:5__=3D07BBF8E0DF11= [email protected]" width=3D"58" height=3D"1"><div align=3D"r= ight"><font size=3D"4">To</font></div></td><td width=3D"85%"><img src=3D= "cid:[email protected]" width=3D"1" height= =3D"1"><font size=3D"4"><br> Hien Q Nguyen/Beaverton/IBM@IBMUS</font></td></tr> <tr valign=3D"top"><td width=3D"15%"><img src=3D"cid:5__=3D07BBF8E0DF11= [email protected]" width=3D"58" height=3D"1"><div align=3D"r= ight"><font size=3D"4">cc</font></div></td><td width=3D"85%"><img src=3D= "cid:[email protected]" width=3D"1" height= =3D"1"></td></tr> <tr valign=3D"top"><td width=3D"15%"><img src=3D"cid:5__=3D07BBF8E0DF11= [email protected]" width=3D"58" height=3D"1"><div align=3D"r= ight"><font size=3D"4">Subject</font></div></td><td width=3D"85%"><img = src=3D"cid:[email protected]" width=3D"1" = height=3D"1"><font size=3D"4"><br> RE: [evlog-dev] Libevlsyslog.so.1 cannot be preloaded</font></td></tr> </table> <table width=3D"100%" border=3D"0" cellspacing=3D"0" cellpadding=3D"0">= <tr valign=3D"top"><td width=3D"50%"><img src=3D"cid:5__=3D07BBF8E0DF11= [email protected]" width=3D"1" height=3D"1"></td><td width=3D= "50%"><img src=3D"cid:[email protected]" w= idth=3D"1" height=3D"1"></td></tr> </table> </td></tr> </table> <font size=3D"5" color=3D"#0000FF" face=3D"Arial"><br> I rebuilt all of evlog, in particular evlogd, for 64 bits. I deleted th= e old eventlog and privatelog and installed the rebuilt objects. Now ev= erything seems to work, except that after I add libevlsyslog.so to the = ld.so.preload file, any telnet or ssh to the system gets "Connecti= on rejected." This of course is a big problem.<br> <br> Any ideas? Thanks much for your help.</font><font size=3D"5"><br> </font><font size=3D"5" color=3D"#0000FF" face=3D"Arial"><br> <br> Regards,<br> Jeff</font><font size=3D"5"><br> </font><font size=3D"4"><br> </font><hr width=3D"100%" size=3D"2" align=3D"left"><b><font size=3D"5"= face=3D"Tahoma">From:</font></b><font size=3D"5" face=3D"Tahoma"> Hien= Q Nguyen [</font><a href=3D"mailto:[email protected]"><u><font size=3D= "5" color=3D"#0000FF" face=3D"Tahoma">mailto:[email protected]</font>= </u></a><font size=3D"5" face=3D"Tahoma">] </font><b><font size=3D"5" f= ace=3D"Tahoma"><br> Sent:</font></b><font size=3D"5" face=3D"Tahoma"> Monday, January 29, 2= 007 10:37 AM</font><b><font size=3D"5" face=3D"Tahoma"><br> To:</font></b><font size=3D"5" face=3D"Tahoma"> Lanam, Jeff</font><b><f= ont size=3D"5" face=3D"Tahoma"><br> Subject:</font></b><font size=3D"5" face=3D"Tahoma"> RE: [evlog-dev] Li= bevlsyslog.so.1 cannot be preloaded</font><font size=3D"4"> </font> <p><font size=3D"6">Sorry for the delay. I am currently quite busy with= other project also I don't have access to a 64 bit machine (AMD). I wi= ll ask someone else look into this issue. The problem looks likes 64 bi= ts vs 32 bits between glibc and syslogd and evlogd.<br> <br> Thanks<br> Hien Nguyen<br> [email protected]<br> Office : 503-578-4347<br> Mobile : 503-702-8814</font><font size=3D"4"><br> </font><img src=3D"cid:[email protected]" = width=3D"16" height=3D"16" alt=3D"Inactive hide details for "Lanam= , Jeff" <[email protected]>"><font size=3D"6">"Lanam, J= eff" <[email protected]></font> <table width=3D"100%" border=3D"0" cellspacing=3D"0" cellpadding=3D"0">= <tr valign=3D"top"><td width=3D"73%"> <ul> <ul> <ul> <ul> <ul> <ul> <ul> <ul> <ul> <ul> <ul> <ul> <ul> <ul> <ul> <ul> <ul> <ul> <ul> <ul> <ul> <ul> <ul> <ul> <ul> <ul> <ul> <ul> <ul> <ul> <ul> <ul><b><font size=3D"5">"Lanam, Jeff" <[email protected]&g= t;</font></b><font size=3D"5"> </font> <p><font size=3D"5">01/26/2007 03:35 PM</font></ul> </ul> </ul> </ul> </ul> </ul> </ul> </ul> </ul> </ul> </ul> </ul> </ul> </ul> </ul> </ul> </ul> </ul> </ul> </ul> </ul> </ul> </ul> </ul> </ul> </ul> </ul> </ul> </ul> </ul> </ul> </ul> </td><td width=3D"27%"> <table width=3D"100%" border=3D"0" cellspacing=3D"0" cellpadding=3D"0">= <tr valign=3D"top"><td width=3D"19%"><img src=3D"cid:5__=3D07BBF8E0DF11= [email protected]" width=3D"58" height=3D"1"><div align=3D"r= ight"><font size=3D"5">To</font></div></td><td width=3D"81%"><img src=3D= "cid:[email protected]" width=3D"1" height= =3D"1"><font size=3D"5"><br> Hien Q Nguyen/Beaverton/IBM@IBMUS</font></td></tr> <tr valign=3D"top"><td width=3D"19%"><img src=3D"cid:5__=3D07BBF8E0DF11= [email protected]" width=3D"58" height=3D"1"><div align=3D"r= ight"><font size=3D"5">cc</font></div></td><td width=3D"81%"><img src=3D= "cid:[email protected]" width=3D"1" height= =3D"1"></td></tr> <tr valign=3D"top"><td width=3D"19%"><img src=3D"cid:5__=3D07BBF8E0DF11= [email protected]" width=3D"58" height=3D"1"><div align=3D"r= ight"><font size=3D"5">Subject</font></div></td><td width=3D"81%"><img = src=3D"cid:[email protected]" width=3D"1" = height=3D"1"><font size=3D"5"><br> RE: [evlog-dev] Libevlsyslog.so.1 cannot be preloaded</font></td></tr> </table> <table width=3D"100%" border=3D"0" cellspacing=3D"0" cellpadding=3D"0">= <tr valign=3D"top"><td width=3D"50%"><img src=3D"cid:5__=3D07BBF8E0DF11= [email protected]" width=3D"1" height=3D"1"></td><td width=3D= "50%"><img src=3D"cid:[email protected]" w= idth=3D"1" height=3D"1"></td></tr> </table> </td></tr> </table> <font size=3D"6" color=3D"#0000FF" face=3D"Arial"><br> <br> Greetings. Sorry to keep pestering you.<br> <br> I was able to get past the Segmentation violation. The problem is that = in libevlsyslog.c,<br> _init is defined as (int argc, char *argv[], ...) Changing the paramete= r declaration to void, I get to the point of actually trying to write t= he event to evlog.<br> <br> Now I get an error in _evlSysWriteEx2, on the second write, the one tha= t writes the data in buff. errno is 32, broken pipe, and when signals a= re turned back on, SIGPIPE is raised. It appears that evlogd is still r= unning. Any suggestions?<br> <br> Regards,<br> Jeff Lanam</font><font size=3D"6"><br> <br> </font><font size=3D"5"><br> </font><font size=3D"4"><br> </font><hr width=3D"100%" size=3D"2" align=3D"left"><b><font size=3D"6"= face=3D"Tahoma">From:</font></b><font size=3D"6" face=3D"Tahoma"> Lana= m, Jeff </font><b><font size=3D"6" face=3D"Tahoma"><br> Sent:</font></b><font size=3D"6" face=3D"Tahoma"> Wednesday, January 24= , 2007 5:17 PM</font><b><font size=3D"6" face=3D"Tahoma"><br> To:</font></b><font size=3D"6" face=3D"Tahoma"> 'Hien Q Nguyen'</font><= b><font size=3D"6" face=3D"Tahoma"><br> Subject:</font></b><font size=3D"6" face=3D"Tahoma"> RE: [evlog-dev] Li= bevlsyslog.so.1 cannot be preloaded</font><font size=3D"6" color=3D"#00= 00FF" face=3D"Arial"><br> <br> Thank you for your reply last week. I did check libevlsyslog.conf. The = only thing in it is "libc.so.6", which is in /lib, so that lo= oks right.<br> <br> I have been able to get libevlsyslog to work on a Pentium system, strai= ght from the RPM. The system I am failing on is an AMD64. I tried to re= build libevlsyslog.so. I seem to get it built ok, but when I set LD_PRE= LOAD to reference it, every program I run gets Segmentation violation.<= br> <br> Any hints on debugging this? I can't seem to get gdb to tell me anythin= g.<br> <br> I try the following sequence:<br> gdb<br> set environment LD_PRELOAD=3D./libevlsyslog.so.1<br> break libevlsyslog.c:_init (this prompts me to make this a pending brea= kpoint)<br> signal SIGSEGV stop<br> file hello (which only has a printf in it, no calls to syslog)<br> run<br> <br> I get the SIGSEGV before my program starts. The breakpoint never happen= ed. There is no stack frame to display, so I cannot tell where it abend= ed.<br> Here is what gdb outputs:<br> Program terminated with signal SIGSEGV, Segmentation fault.<br> The program no longer exists.<br> You can't do that without a process to debug.<br> <br> Any ideas?<br> <br> Thanks<br> jeff</font><font size=3D"5"><br> </font><font size=3D"4"><br> </font><hr width=3D"100%" size=3D"2" align=3D"left"><b><font size=3D"6"= face=3D"Tahoma">From:</font></b><font size=3D"6" face=3D"Tahoma"> Hien= Q Nguyen [</font><a href=3D"mailto:[email protected]"><u><font size=3D= "6" color=3D"#0000FF" face=3D"Tahoma">mailto:[email protected]</font>= </u></a><font size=3D"6" face=3D"Tahoma">] </font><b><font size=3D"6" f= ace=3D"Tahoma"><br> Sent:</font></b><font size=3D"6" face=3D"Tahoma"> Monday, January 15, 2= 007 3:24 PM</font><b><font size=3D"6" face=3D"Tahoma"><br> To:</font></b><font size=3D"6" face=3D"Tahoma"> Lanam, Jeff</font><b><f= ont size=3D"6" face=3D"Tahoma"><br> Cc:</font></b><font size=3D"6" face=3D"Tahoma"> evlog-developers@lists.= sourceforge.net; [email protected]</font><= b><font size=3D"6" face=3D"Tahoma"><br> Subject:</font></b><font size=3D"6" face=3D"Tahoma"> Re: [evlog-dev] Li= bevlsyslog.so.1 cannot be preloaded</font><font size=3D"5"> </font> <p><font size=3D"7">Check libevlsyslog.conf for the correct version of = glibc. It that does not work, you may need to get the evlog source and = build evlog on your system then copy libevlsyslog.so to /lib</font><fon= t size=3D"7"><br> <br> <br> Hien Nguyen<br> [email protected]</font><font size=3D"5"><br> </font><font size=3D"4"><br> </font><img src=3D"cid:[email protected]" = width=3D"16" height=3D"16" alt=3D"Inactive hide details for "Lanam= , Jeff" <[email protected]>"><font size=3D"7">"Lanam, J= eff" <[email protected]></font><font size=3D"4"> </font> <table width=3D"100%" border=3D"0" cellspacing=3D"0" cellpadding=3D"0">= <tr valign=3D"top"><td width=3D"92%"> <ul> <ul> <ul> <ul> <ul> <ul> <ul> <ul> <ul> <ul> <ul> <ul> <ul> <ul> <ul> <ul> <ul> <ul> <ul> <ul> <ul> <ul> <ul> <ul> <ul> <ul> <ul> <ul> <ul> <ul> <ul> <ul> <ul> <ul> <ul> <ul> <ul> <ul> <ul> <ul> <ul> <ul> <ul> <ul> <ul> <ul> <ul> <ul> <ul> <ul> <ul> <ul> <ul> <ul> <ul> <ul> <ul> <ul> <ul> <ul> <ul> <ul> <ul> <ul><b><font size=3D"6">"Lanam, Jeff" <[email protected]&g= t;</font></b><font size=3D"6"> <br> Sent by: [email protected]</font><font siz= e=3D"7"> </font> <p><font size=3D"6">01/15/2007 01:54 PM</font></ul> </ul> </ul> </ul> </ul> </ul> </ul> </ul> </ul> </ul> </ul> </ul> </ul> </ul> </ul> </ul> </ul> </ul> </ul> </ul> </ul> </ul> </ul> </ul> </ul> </ul> </ul> </ul> </ul> </ul> </ul> </ul> </ul> </ul> </ul> </ul> </ul> </ul> </ul> </ul> </ul> </ul> </ul> </ul> </ul> </ul> </ul> </ul> </ul> </ul> </ul> </ul> </ul> </ul> </ul> </ul> </ul> </ul> </ul> </ul> </ul> </ul> </ul> </ul> </td><td width=3D"8%"> <table width=3D"100%" border=3D"0" cellspacing=3D"0" cellpadding=3D"0">= <tr valign=3D"top"><td width=3D"44%"><img src=3D"cid:5__=3D07BBF8E0DF11= [email protected]" width=3D"58" height=3D"1"><div align=3D"r= ight"><font size=3D"6">To</font></div></td><td width=3D"56%"><img src=3D= "cid:[email protected]" width=3D"1" height= =3D"1"><font size=3D"6"><br> <[email protected]></font></td></tr> <tr valign=3D"top"><td width=3D"44%"><img src=3D"cid:5__=3D07BBF8E0DF11= [email protected]" width=3D"58" height=3D"1"><div align=3D"r= ight"><font size=3D"6">cc</font></div></td><td width=3D"56%"><img src=3D= "cid:[email protected]" width=3D"1" height= =3D"1"></td></tr> <tr valign=3D"top"><td width=3D"44%"><img src=3D"cid:5__=3D07BBF8E0DF11= [email protected]" width=3D"58" height=3D"1"><div align=3D"r= ight"><font size=3D"6">Subject</font></div></td><td width=3D"56%"><img = src=3D"cid:[email protected]" width=3D"1" = height=3D"1"><font size=3D"6"><br> [evlog-dev] Libevlsyslog.so.1 cannot be preloaded</font></td></tr> </table> <table width=3D"100%" border=3D"0" cellspacing=3D"0" cellpadding=3D"0">= <tr valign=3D"top"><td width=3D"50%"><img src=3D"cid:5__=3D07BBF8E0DF11= [email protected]" width=3D"1" height=3D"1"></td><td width=3D= "50%"><img src=3D"cid:[email protected]" w= idth=3D"1" height=3D"1"></td></tr> </table> </td></tr> </table> <tt><font size=3D"7"><br> I have installed the evlog 1.6.1 RPM on Red Hat Linux. I cannot g= et<br> syslog forwarding to work.<br> I tried running /sbin/slog_fwd, but libevlsyslog.so.1 does not appear t= o<br> be in the RPM.<br> I tried copying libevlsys.log.so.0.0.0 to libevlsyslog.so.1, so that<br= > slog_fwd can find it.<br> When I do that, every command from then on gets at least one of the<br>= following errors:<br> <br> ERROR: ld.so: object '/lib/libevlsyslog.so.1' from /etc/ld.so.preload<b= r> cannot be preloaded: ignored.<br> <br> Please help, the rest of evlog seems to work fine. I am not a Lin= ux<br> expert; I have no idea why it cannot be preloaded.<br> <br> Regards, Jeff<br> <br> <br> -----------------------------------------------------------------------= --<br> Take Surveys. Earn Cash. Influence the Future of IT<br> Join SourceForge.net's Techsay panel and you'll get the chance to share= your<br> opinions on IT & business topics through brief surveys - and earn c= ash</font></tt><u><font size=3D"4" color=3D"#0000FF"><br> </font></u><a href=3D"http://www.techsay.com/default.php?page=3Djoin.ph= p&p=3Dsourceforge&CID=3DDEVDEV"><tt><u><font size=3D"7" color=3D"#0000F= F">http://www.techsay.com/default.php?page=3Djoin.php&p=3Dsourcefor= ge&CID=3DDEVDEV</font></u></tt></a><tt><font size=3D"7"><br> _______________________________________________<br> evlog-developers mailing list<br> [email protected]</font></tt><u><font size=3D"4" c= olor=3D"#0000FF"><br> </font></u><a href=3D"https://lists.sourceforge.net/lists/listinfo/evlo= g-developers"><tt><u><font size=3D"7" color=3D"#0000FF">https://lists.s= ourceforge.net/lists/listinfo/evlog-developers</font></u></tt></a><font= size=3D"4"><br> </font><tt>------------------------------------------------------------= -------------<br> Take Surveys. Earn Cash. Influence the Future of IT<br> Join SourceForge.net's Techsay panel and you'll get the chance to share= your<br> opinions on IT & business topics through brief surveys - and earn c= ash<br> </tt><tt><a href=3D"http://www.techsay.com/default.php?page=3Djoin.php&= p=3Dsourceforge&CID=3DDEVDEV">http://www.techsay.com/default.php?page=3D= join.php&p=3Dsourceforge&CID=3DDEVDEV</a></tt><tt>_____________= __________________________________<br> evlog-developers mailing list<br> [email protected]<br> </tt><tt><a href=3D"https://lists.sourceforge.net/lists/listinfo/evlog-= developers">https://lists.sourceforge.net/lists/listinfo/evlog-develope= rs</a></tt><tt><br> </tt><br> </body></html>= --1__=07BBF8E0DF1157588f9e8a93df938690918c07BBF8E0DF115758-- --0__=07BBF8E0DF1157588f9e8a93df938690918c07BBF8E0DF115758 Content-type: image/gif; name="graycol.gif" Content-Disposition: inline; filename="graycol.gif" Content-ID: <[email protected]> Content-transfer-encoding: base64 R0lGODlhEAAQAKECAMzMzAAAAP///wAAACH5BAEAAAIALAAAAAAQABAAAAIXlI+py+0PopwxUbpu ZRfKZ2zgSJbmSRYAIf4fT3B0aW1pemVkIGJ5IFVsZWFkIFNtYXJ0U2F2ZXIhAAA7 --0__=07BBF8E0DF1157588f9e8a93df938690918c07BBF8E0DF115758 Content-type: image/gif; name="pic07323.gif" Content-Disposition: inline; filename="pic07323.gif" Content-ID: <[email protected]> Content-transfer-encoding: base64 R0lGODlhWABDALP/AAAAAK04Qf79/o+Gm7WuwlNObwoJFCsoSMDAwGFsmIuezf///wAAAAAAAAAA AAAAACH5BAEAAAgALAAAAABYAEMAQAT/EMlJq704682770RiFMRinqggEUNSHIchG0BCfHhOjAuh EDeUqTASLCbBhQrhG7xis2j0lssNDopE4jfIJhDaggI8YB1sZeZgLVA9YVCpnGagVjV171aRVrYR RghXcAGFhoUETwYxcXNyADJ3GlcSKGAwLwllVC1vjIUHBWsFilKQdI8GA5IcpApeJQt8L09lmgkH LZikoU5wjqcyAMMFrJIDPAKvCFletKSev1HBw8KrxtjZ2tvc3d5VyKtCKW3jfz4uMKmq3xu4N0nK BVoJQmx2LGVOmrqNjjJf2hHAQo/eDwJGTKhQMcgQEEAnEjFS98+RnW3smGkZU6ncCWav/4wYOnAI TihRL/4FEwbp28BXMMcoscQCVxlepL4IGDSCyJyVQOu0o7CjmLN50OZlqWmyFy5/6yBBuji0AxFR M00oQAqNIstqI6qKHUsWRAEAvagsmfUEAImyxgbmUpJk3IklNUtJOUAVLoUr1+wqDGTE4zk+T6FG uQb3SizBCwatiiUgCBN8vrz+zFjVyQ8FWkOlg4NQiZMB5QS8QO3mpOaKnL0Z2EKvNMSILEThKhCg zMKPVxYJh23qm9KNW7pArPynMqZDiErsTMqI+LRi3QAgkFUbXpuFKhSYZALd0O5RKa2z9EYKBbpb qxIKsjUPRgD7I2XYV6wyrOw92ykExP8NW4URhknC5dKGE4v4NENQj2jXjmfNgOZDaXb5glRmXQ33 YEWQYNcZFnrYcIQLNzyTFDQNkXIff0ExVlY4srziQk43inZgL4rwxxINMvpFFAz1KOODHiu+4aEw NEjFl5B3JIKWKF3k6I9bfUGp5ZZcdunll5IA4cuHvQQJ5gcsoCWOOUwgltIwAKRxJgbIkJAQZEq0 2YliZnpZZ4BH3CnYOXldOUOfQoYDqF1LFHbXCrO8xmRsfoXDXJ6ChjCAH3QlhJcT6VWE6FCkfCco CgrMFsROrIEX3o2whVjWDjoJccN3LdggSGXLCdLEgHr1lyU3O3QxhgohNKXJCWv8JQr/PDdaqd6w 2rj1inLiGeiCJoDspAoQlYE6QWLSECehcWIYxIQES6zhbn1iImTHEQyqJ4eIxJJoUBc+3CbBuwZE V5cJPPkIjFDdeEabQbd6WgICTxiiz0f5dBKquXF6k4senwEhYGnKEFJeGrxUZy8dB8gmAXI/sPvH ESfCwVt5hTgYiqQqtdRNHQIU1PJ33ZqmzgE90OwLaoJcnMop1WiMmgkPHQRIrwgFuNV90A3doNKT mrKIN07AnGcI9BQjhCBN4RfA1qIZnMqorJCogKfGQnxSCDilTVIA0yl5ciTovgLuBDKFUDE9aQcw 9SA+rjSNf9/M1gxrj6VwDTS0IUSElMzBfsj0NFXR2kwsV1A5IF1grLgLL/r1R40BZEnuBWgmQEyb jqRwSAt6bqMCOFkvKFN2GPPkUzIm/SCF8z8pVzpbjVnMsy0vOr1hw3SaSRUhpY09v0z0J1FnwzPl fmh+xl4WtR0zGu24I4KbMQm3lnVu2oNWxI9W/lcyzA+mCKF4DBikxb/+UWtOGRiFP8qEwAayIgIA Ow== --0__=07BBF8E0DF1157588f9e8a93df938690918c07BBF8E0DF115758 Content-type: image/gif; name="ecblank.gif" Content-Disposition: inline; filename="ecblank.gif" Content-ID: <[email protected]> Content-transfer-encoding: base64 R0lGODlhEAABAIAAAAAAAP///yH5BAEAAAEALAAAAAAQAAEAAAIEjI8ZBQA7 --0__=07BBF8E0DF1157588f9e8a93df938690918c07BBF8E0DF115758 Content-type: image/gif; name="15006920.gif" Content-Disposition: inline; filename="15006920.gif" Content-ID: <[email protected]> Content-transfer-encoding: base64 R0lGODlhEAAQAKECAMzMzAAAAP///wAAACH5BAEAAAIALAAAAAAQABAAAAIXlI+py+0PopwxUbpu ZRfKZ2zgSJbmSRYAIf4fT3B0aW1pemVkIGJ5IFVsZWFkIFNtYXJ0U2F2ZXIhAAA7 --0__=07BBF8E0DF1157588f9e8a93df938690918c07BBF8E0DF115758 Content-type: image/gif; name="15807184.gif" Content-Disposition: inline; filename="15807184.gif" Content-ID: <[email protected]> Content-transfer-encoding: base64 R0lGODlhEAABAIAAAAAAAP///yH5BAEAAAEALAAAAAAQAAEAAAIEjI8ZBQA7 --0__=07BBF8E0DF1157588f9e8a93df938690918c07BBF8E0DF115758-- --===============1862593467== Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline ------------------------------------------------------------------------- Take Surveys. Earn Cash. Influence the Future of IT Join SourceForge.net's Techsay panel and you'll get the chance to share your opinions on IT & business topics through brief surveys - and earn cash http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV --===============1862593467== Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline _______________________________________________ evlog-developers mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/evlog-developers --===============1862593467==--