Re: [evlog-dev] Evlog remote forwarding error (Second try)
"Tong Liu" <[email protected]> Thu, 12 Apr 2007 20:54:49 -0700
| Newsgroups | gmane.linux.kernel.event-logging |
|---|---|
| Message-ID | <[email protected]> |
--===============0122165816== Content-Type: multipart/alternative; boundary="----=_Part_118_24967318.1176436489941" ------=_Part_118_24967318.1176436489941 Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Content-Disposition: inline Many thanks! Jim. I will fix it. Regards Tong On 4/11/07, James Keniston <[email protected]> wrote: > > [email protected] wrote on 04/11/2007 > 09:07:51 AM: > > > Hello, > > > > Thanks for Jim's response in terms of evlog compiling issue. > > Now most functions of evlog work flawlessly. > > > > Here is an error I found after enabling udp/tcp log remote > > forwarding function. > > Uid value in all the forwarded log messages is overwritten by Severity > value: > > ON central log server Node1: > > > > recid=5, size=73, format=STRING, event_type=0x109, facility=LOCAL3, > > severity=CRIT, uid=CRIT, gid=root, pid=26035, pgrp=26035, > > time=Tue 10 Apr 2007 05:01:02 PM PDT, flags=0x0, thread=0xf7fc46c0, > > processor=0, host=node2 > > try log forwarding function > > > > > > I have tried, the same issue also exists on evlog rpms from evlog > website. > > > > Which module should I modify to correct this problem? > > The problem appears to be in the POSIX_LOG_ENTRY_UID case of > posix_log_memtostr() > in posix1.c. If the host is a remote host, it should encode the numeric > value of > the uid (as when getpwuid[_r] fails to find a match). Instead, it encodes > nothing, > and what was in the buffer before (i.e., "CRIT") remains. > > BTW, seems like POSIX_LOG_ENTRY_GID should be handled similarly. > > > After I fixed it, I can post the patch here. > > That'd be great. Thanks. > Jim > > > > > Thanks. > > > > ~ > > Tong > > > ------------------------------------------------------------------------- > ... > > _______________________________________________ > > evlog-developers mailing list > > [email protected] > > https://lists.sourceforge.net/lists/listinfo/evlog-developers > > ------=_Part_118_24967318.1176436489941 Content-Type: text/html; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit Content-Disposition: inline <div>Many thanks! Jim.</div> <div> </div> <div>I will fix it.</div> <div> </div> <div>Regards</div> <div>Tong<br><br> </div> <div><span class="gmail_quote">On 4/11/07, <b class="gmail_sendername">James Keniston</b> <<a href="mailto:[email protected]">[email protected]</a>> wrote:</span> <blockquote class="gmail_quote" style="PADDING-LEFT: 1ex; MARGIN: 0px 0px 0px 0.8ex; BORDER-LEFT: #ccc 1px solid"> <div> <p><tt><a onclick="return top.js.OpenExtLink(window,event,this)" href="mailto:[email protected]" target="_blank">[email protected]</a> wrote on 04/11/2007 09:07:51 AM: <br><br>> Hello,</tt> <div><span class="e" id="q_111e1ce55974bfae_1"><br><tt>> </tt><br><tt>> Thanks for Jim's response in terms of evlog compiling issue.</tt><br><tt>> Now most functions of evlog work flawlessly.</tt><br><tt>> </tt><br><tt>> Here is an error I found after enabling udp/tcp log remote <br>> forwarding function.</tt><br><tt>> Uid value in all the forwarded log messages is overwritten by Severity value:</tt><br><tt>> ON central log server Node1: </tt><br><tt>> </tt><br><tt>> recid=5, size=73, format=STRING, event_type=0x109, facility=LOCAL3,<br>> severity=CRIT, uid=CRIT, gid=root, pid=26035, pgrp=26035,<br>> time=Tue 10 Apr 2007 05:01:02 PM PDT, flags=0x0, thread=0xf7fc46c0, <br>> processor=0, host=node2 </tt><br><tt>> try log forwarding function</tt><br><tt>> </tt><br><tt>> </tt><br><tt>> I have tried, the same issue also exists on evlog rpms from evlog website.</tt><br><tt> > </tt><br><tt>> Which module should I modify to correct this problem?</tt><br><br></span></div><tt>The problem appears to be in the POSIX_LOG_ENTRY_UID case of posix_log_memtostr()</tt><br><tt>in posix1.c. If the host is a remote host, it should encode the numeric value of </tt><br><tt>the uid (as when getpwuid[_r] fails to find a match). Instead, it encodes nothing,</tt><br><tt>and what was in the buffer before (i.e., "CRIT") remains.</tt><br><br><tt>BTW, seems like POSIX_LOG_ENTRY_GID should be handled similarly. </tt><span class="q"><br><br><tt>> After I fixed it, I can post the patch here.</tt><br><br></span><tt>That'd be great. Thanks.</tt><br><tt>Jim</tt><br><br><tt>> </tt><br><tt>> Thanks.</tt><br><tt>> </tt> <br><tt>> ~</tt><br><tt>> Tong</tt><br><tt>> -------------------------------------------------------------------------<br>...<br>> _______________________________________________<br>> evlog-developers mailing list <br>> <a onclick="return top.js.OpenExtLink(window,event,this)" href="mailto:[email protected]" target="_blank">[email protected]</a><br>> <a onclick="return top.js.OpenExtLink(window,event,this)" href="https://lists.sourceforge.net/lists/listinfo/evlog-developers" target="_blank"> https://lists.sourceforge.net/lists/listinfo/evlog-developers</a><br></tt> <p></p></p></div></blockquote></div><br> ------=_Part_118_24967318.1176436489941-- --===============0122165816== Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline ------------------------------------------------------------------------- Take Surveys. Earn Cash. Influence the Future of IT Join SourceForge.net's Techsay panel and you'll get the chance to share your opinions on IT & business topics through brief surveys-and earn cash http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV --===============0122165816== Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline _______________________________________________ evlog-developers mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/evlog-developers --===============0122165816==--