made the TCP session limit configurable via command line switch now -t <port>,<max sessions>
added man page for rklogd(8) (basically a copy from klogd, but now there is one...)
fixed a bug that caused internal messages (e.g. rsyslogd startup) to appear without a tag.
removed a minor memory leak that occurred when TAG processing requalified a HOSTNAME to be a TAG (and a TAG already was set).
removed potential small memory leaks in MsgSet***() functions. There would be a leak if a property was re-set, something that happened extremely seldom
added a new property "PRI-text", which holds the PRI field in textual form (e.g. "syslog.info")
added alias "syslogseverity" for "syslogpriority", which is a misleading property name that needs to stay for historical reasons (and backward-compatility)
added doc on how to record PRI value in log file
enhanced signal handling in klogd, including removal of an unsafe call to the logging system during signal handling
create a version of syslog.c from scratch. This is now
highly optimized for rsyslog
removes an incompatible license problem as the original version had a BSD license with advertising clause
fixed in the regard that rklogd will continue to work when rsysogd has been restarted (the original version, as well as sysklogd, will remain silent then)
solved an issue with an extra NUL char at message end that the original version had
applied some changes to klogd to care for the new interface
fixed a bug in syslogd.c which prevented compiling under debian
changed the listen backlog limit to a more reasonable value based on the maximum number of TCP connections configurd (10% + 5) - thanks to Guy Standen for the hint (actually, the limit was 5 and that was a left-over from early testing).
fixed a bug in makefile which caused DB-support to be disabled when NETZIP support was enabled
added the -e option to allow transmission of every message to remote hosts (effectively turns off duplicate message suppression)
(somewhat) improved memory consumption when compiled with MySQL support
looks like we fixed an incompatibility with MySQL 5.x and above software. At least in one case, the remote server name was destroyed, leading to a connection failure. The new, improved code does not have this issue and so we see this as solved (the new code is generally somewhat better, so there is a good chance we fixed this incompatibility)
Posted by
rgerhards
on
Monday, February 05, 2007
1172
added '$' as ToPos proptery replacer specifier - means "up to the
end of the string"
property replacer option "escape-cc", "drop-cc" and "space-cc" added
changed the handling of \0 characters inside syslog messages. We now
consistently escape them to "#000". This is somewhat recommended in
the draft-ietf-syslog-protocol-19 draft. While the real recomendation
is to not escape any characters at all, we can not do this without
considerable modification of the code. So we escape it to "#000", which
is consistent with a sample found in the Internet-draft.
removed message glue logic (see printchopped() comment for details)
Also caused removal of parts table and thus some improvements in
memory usage.
changed the default MAXLINE to 2048 to take care of recent syslog
standardization efforts (can easily be changed in syslogd.c)
added support for byte-counted TCP syslog messages (much like syslog-transport-tls-05 Internet Draft). This was necessary to support compression over TCP.
added support for receiving compressed syslog messages
added support for sending compressed syslog messages
fixed a bug where the last message in a syslog/tcp stream was
lost if it was not properly terminated by a LF characte
Posted by
rgerhards
on
Tuesday, December 19, 2006
1143
Version 1.12.3 (RGer), 2006-10-04, development branch
added (interim) -u 1 option to turn off hostname and tag parsing
done some modifications to better support Fedora
made the field delimiter inside property replace configurable via template
fixed a bug in property replacer: if fields were used, the delimitor became part of the field. Up until now, this was barely noticable as the delimiter as TAB only and thus invisible to a human. With other delimiters available now, it quickly showed up. This bug fix might cause some grief to existing installations if they used the extra TAB for whatever reasons - sorry folks... Anyhow, a solution is easy: just add a TAB character contstant into your template. Thus, there has no attempt been made to do this in a backwards-compatible way.
implemented some changes to support Solaris (but support is not yet complete)
commented out (via #if 0) some methods that are currently not being use but should be kept for further use
Posted by
rgerhards
on
Wednesday, October 04, 2006
1273
a small but important fix: the tcp receiver had two forgotten printf's in it that caused a lot of unnecessary output to stdout. This was important enough to justify a new release
Posted by
rgerhards
on
Wednesday, February 01, 2006
2089
