Re: [Sshguard-users] fifo stops receiving output

[Mij <mi...@ss...>]

Hmm, this is weird :)

Blind dive: does anything happen with the permissions of the FIFO?
If I recall it right, ubuntu runs syslogd as an unprivileged user.

If you sort it out, please report your answer to the list for the archives.

If you don't, consider using Log Sucking.


On May 17, 2010, at 20:42 , Adam Cohen wrote:

> greetings,
> I'm adding sshguard (r1.5rc2) to a system running Ubuntu (8.1 / intrepid)
> 
> Configure for iptables, looks good
> Built from sources, looks good
> Configure /etc/syslog.conf as below:
> 
> #  /etc/syslog.conf	Configuration file for syslogd.
> auth.info;authpriv.info		|/var/log/sshguard.fifo
> auth,authpriv.*			/var/log/auth.log
> *.*;auth,authpriv.none		-/var/log/syslog
> 
> Restart syslog
> /etc/init.d/sysklogd restart
> 
> Start sshguard
> initctl start sshguard
> 
> sshguard works fine as FIFO receives messages
> 
> But after a while...FIFO stops receiving messages and so sshguard gets no input to scan.  This seems like an Ubuntu issue but could there be something wrong with my syslog.conf?
> 
> thanks
> Adam
> 
> -- 
> Adam Cohen / IT Manager
> Energy Biosciences Institute / UC Berkeley
> 109 Calvin Lab / 510-642-7709
> http://www.energybiosciencesinstitute.org
> 
> ------------------------------------------------------------------------------
> 
> _______________________________________________
> Sshguard-users mailing list
> Ssh...@li...
> https://lists.sourceforge.net/lists/listinfo/sshguard-users