Re: [evlog-dev] Evlog remote forwarding error (Second try)

[Tong L. <ton...@gm...>]

Many thanks! Jim.

I will fix it.

Regards
Tong


On 4/11/07, James Keniston <ken...@us...> wrote:
>
>  evl...@li... wrote on 04/11/2007
> 09:07:51 AM:
>
> > Hello,
> >
> > Thanks for Jim's response in terms of evlog compiling issue.
> > Now most functions of evlog work flawlessly.
> >
> > Here is an error I found after enabling udp/tcp log remote
> > forwarding function.
> > Uid value in all the forwarded log messages is overwritten by Severity
> value:
> > ON central log server Node1:
> >
> > recid=5, size=73, format=STRING, event_type=0x109, facility=LOCAL3,
> > severity=CRIT, uid=CRIT, gid=root, pid=26035, pgrp=26035,
> > time=Tue 10 Apr 2007 05:01:02 PM PDT, flags=0x0, thread=0xf7fc46c0,
> > processor=0, host=node2
> > try log forwarding function
> >
> >
> > I have tried, the same issue also exists on evlog rpms from evlog
> website.
> >
> > Which module should I modify to correct this problem?
>
> The problem appears to be in the POSIX_LOG_ENTRY_UID case of
> posix_log_memtostr()
> in posix1.c.  If the host is a remote host, it should encode the numeric
> value of
> the uid (as when getpwuid[_r] fails to find a match).  Instead, it encodes
> nothing,
> and what was in the buffer before (i.e., "CRIT") remains.
>
> BTW, seems like POSIX_LOG_ENTRY_GID should be handled similarly.
>
> > After I fixed it, I can post the patch here.
>
> That'd be great.  Thanks.
> Jim
>
> >
> > Thanks.
> >
> > ~
> > Tong
> >
>  -------------------------------------------------------------------------
> ...
> > _______________________________________________
> > evlog-developers mailing list
> > evl...@li...
> > https://lists.sourceforge.net/lists/listinfo/evlog-developers
>
>