Re: [logs] sdsc syslog on bsd?

From: Jose Nazario (jose@private)
Date: Mon Feb 14 2005 - 08:09:41 PST


On Mon, 14 Feb 2005, ArkanoiD wrote:

> Is there a BSD port of SDSC syslog or its suitable replacement?

back when the project was first announced, at 1.0, i sent tom perrine soem
initial patches to get it to build on OpenBSD. here's a copy of the
message:

again, i have tried sdsc secure syslog on openbsd and found it has a
handful of linux specific include issues and one small function
dependency. a diff of what it took to get it to partially build is
attached.

the remaining problem comes in OMOD_USER_send_msg() in omod_user.c.
starting with setutent(), the remainder of the function uses structs and
functions specific to linux (or at least absent in openbsd). i don't know
enough about your code to determine what it is you're hoping to do and how
crucial this is, so ... i didn't go beyond commenting out a pair of lines.

any suggestions? i hope these patches (i cc'd Yann Berthier, according to
some list traffic in january he was working on a freebsd port if he had
time) are useful for a bsd port. as for the linux specific stuff ... looks
like no one has yet figured out what to do about it and keep your goals
intact.


the patch is attached as a reference point. i am no longer working on the
effort ... i share it to facilitate any porting effort. it's a bit
hackish, and i only want it to compile to start playing with it some more.

________
jose nazario, ph.d.			jose@private
http://monkey.org/~jose/ 		http://infosecdaily.net/


_______________________________________________
LogAnalysis mailing list
LogAnalysis@private
http://lists.shmoo.com/mailman/listinfo/loganalysis



This archive was generated by hypermail 2.1.3 : Mon Feb 14 2005 - 08:18:58 PST