2
Thu, 03 Dec 2009 18:02:56 +0100
5
* Fixed a possible hang that caused syslog-ng to completely stop
6
processing messages, in case SQL destination is enabled in
7
configure. The bug does not need a working SQL destination.
8
* Fixed a possible 100% CPU usage in case an udp destination went
10
* Fixed host_override/program_override options that were broken in
12
* Fixed the SQL destination to avoid dropping the output queue in
13
case a HUP was received.
14
* Fixed a possible segmentation fault when parsing syntactically
15
incorrect patterndb files.
16
* Fixed ESTRING parser to include the ending quote character in the
18
* Report an error in case there's no terminating brace in template
19
macro references, e.g. no closing brace in ${macro} format.
20
* Fixed FreeBSD init script to add $prefix/sbin to the PATH
21
environment variable. This problem caused syslog-ng not to start
23
* Fixed FreeBSD /dev/klog message reading, follow_freq() needs to
24
default to zero in this case (just like Linux /proc/kmsg).
25
* Fixed a possible segfault in SIGHUP processing if an included file
26
contains a syntax error.
27
* RFC5424 over UDP erroneously required frame length, just like TCP,
29
* Fixed HP-UX 11iv2 compilation issue related to pread/pwrite
33
* Added support for Cisco ASA timestamps.
34
* Added version checks for PCRE in the configure script.
35
* Integrate with system LSB init scripts a bit better, with 3.0.5
36
the init script status reports should nicely integrate with
40
Wed, 05 Aug 2009 12:51:31 +0200
43
* The use of the tcp6 destination caused aborts during startup,
44
which has now been fixed.
45
* The window size used for flow control could be decremented to a
46
negative value in case multiple incoming connections overflowed
47
the queue. This could cause an abort if a SIGHUP was received at
49
* Fixed a possible segmentation fault under Solaris if the syslog()
50
driver was used without explicitly specifying a transport()
52
* Fixed parse error handling when loading the patterndb.
53
* Fixed the handling of door initialization failures on Solaris.
56
* Fixed performance degradation when using the
57
host_override/program_override options.
60
Thu, 25 Jun 2009 08:20:28 +0200
63
* There was an unintended change in the meaning of command line
64
argument -C (--chroot) and -R (--persist-file) between 2.x and 3.x
65
versions of syslog-ng. This release reverts this change back to
66
the original 2.x behaviour. This is a incompatible change
67
compared against 3.0.2. Please review your startup scripts if you
71
* Fixed a compilation problem if IPv6 is disabled.
72
* Fixed a crash problem if a log statement has a filter but no
74
* The usertty() driver was changed to open the terminal device in
75
nonblocking mode, as open on a serial device might block which
76
cause the syslog-ng process to hang.
80
Thu, 07 May 2009 08:30:06 +0200
83
* This release is the first to feature binary packages, installation
84
packages for various platforms.
87
* Only assume that a source logfile was rotated if the new log file
88
has a non-zero size. This fix solves a minor race which might
89
cause some messages to be lost from the end of the old logfile.
90
* Fixed the processing of the -u and -g command line options to set
91
the user/group of the syslog-ng process. Previously all usernames
92
were rejected as non-existant.
93
* Resolve usernames before chrooting, to avoid the need to have an
94
/etc/passwd & /etc/group inside the chroot.
95
* Fixed the read rate of regular files, with the change in this
96
release it is now possible to fully saturate a destination pipe by
97
using plain text files.
98
* Fixed a synchronization problem in the SQL destination on AIX
99
causing random crashes when the SQL destination is used.
100
* Make the "syslog" reserved word usable as a facility name,
101
previously syslog-ng indicated a syntax error if syslog as a
102
facility was not enclosed in quotation marks.
103
* Don't write the pidfile in case only a syntax check was requested.
104
* Fixed compilation problems if SSL support is not enabled.
105
* Set the default fd limit to 256 on cygwin as that platform does
106
not support the current default of 4096 used on all other
108
* Fixed template expansion for non-inline templates defined using
109
the template statement.
110
* Fixed the handling of zero-sized packets in the udp() source.
111
* Fixed the storing of regexp/db-parser() matches on big-endian, 32
113
* Fixed character conversion in case one chunk of data has an
114
incomplete sequence at the end.
115
* Don't let the character conversion eat up unlimited memory to
116
avoid an easy DoS condition.
117
* Fixed SSL certificate validation, added X.509 policy check, fixed
118
required-untrusted verify-mode and added basicConstraints
120
* Fixed /dev/klog handling on FreeBSD, syslog-ng attempted to open
121
this device multiple times which is not permitted.
122
* Fixed $TZOFS expansion in templates in case the target does not
123
specify a conversion timezone (which is the default and is true in
125
* Fixed the use of multiple SQL destinations, previously due to an
126
initialization problem only the first SQL destination would ever
127
start writing messages to the target database.
128
* If you elected to use a host-file only name resolution, the check
129
to see if the hosts file was changed was performed for each DNS
130
resolution, causing a major performance drop. This was fixed.
131
* Due to a typo in the configuration file parser, using SSL
132
destinations always resulted in a segmentation fault. This was
134
* Fixed counting the number of concurrent connections in the
135
SSL enabled tcp() source, previously failing handshakes were
136
counted, thus it is quite easy to reach the max-connection limit.
137
* Clarified logging about connection rejected by
138
/etc/hosts.deny & /etc/hosts.allow
139
* HP-UX 11v3 compilation fixes
140
* Fixed SOURCEIP expansion for IPv6 addresses.
141
* Fixed match(type(string)) not to match the message in case only a
142
prefix match was found.
143
* Fixed capability setup code around file opens.
146
* Implemented 'store-legacy-msghdr' source flag which keeps the
147
original value of MSGHDR intact, instead of parsing/rebuilding it
148
at the cost of some performance penalty.
149
* Implemented 'empty-lines' source flag to avoid dropping empty log
150
messages which is the default behaviour.
151
* Added support for file includes in the configuration file.
152
* Allow follow_freq() to be a floating point number.
153
* Cygwin packaging fixes.
154
* Make it possible to create named pipes automatically in the pipe()
156
* Allow the use of macros in the filename of pipe() destinations.
157
* Added support for setting the default priority/facility value for
158
each source that get applied to messages that lack one.
159
* Recognize "mssql" as an alias for "freetds" in the SQL
161
* Added the "greedy" flags to the csv-parser(): it makes the last
162
column eat the complete end of the line without caring about
163
column separation characters
164
* Added the "drop-invalid" flag to the csv-parser() which makes the
165
parser drop anything that has less columns than it expects to
167
* Make it possible to use fractions of a second even in non-ISO
169
* The default values for SQL columns is being deprecated, please
170
supply SQL schema information explicitly in your SQL destinations.
171
A warning message was added in case you don't have a full schema
172
and rely on the default values.
173
* The SQL destination got a null() option that specifies a 'special'
174
value for a column which get replaced by an SQL NULL.
175
* Added local_timezone() option to file/sql destinations that
176
control the timezone used when expanding the filename/tablename
177
templates. It defaults to the local timezone.
180
* This section lists changes that might affect distribution
181
packages, please make sure that these changes do not break the
182
syslog-ng packages in any way.
183
* Changed the default value of pidfiledir to ${localstatedir} to
184
match GNU conventions, you can specify it explicitly with a
185
--with-pidfile-dir configure option.
186
* Changed the default linking mode to "dynamic" to make it easier to
187
compile syslog-ng, as most distributions prefer dynamic libraries
188
over static ones. This means that syslog-ng might not be able to
189
start up if /usr is on NFS. On platforms where syslog-ng is used
190
as a system logger, the previous setting of --enable-mixed-linking
194
* the sequence number and timestamping of generated messages were
195
erroneously commented out, these were reverted.
196
* do not allow message sizes that are larger than the predefined
198
* in addition to reporting the number of messages/sec, also report
199
the effective bandwidth used during testing.
202
* A lot of enhancements to the functional test program to cover more
203
of the syslog-ng code, like SSL sources & SQL destinations.
207
Wed, 24 Dec 2008 12:16:08 +0100
209
We are happy to announce that version 3.0 of the syslog-ng Open Source Edition
210
application has been released. The news and highlights of this version are
216
* Version 3.0 of syslog-ng supports the new syslog protocol standards
217
developed by the Internet Engineering Task Force (IETF). The details
218
of these protocols can be found at
219
http://www.ietf.org/internet-drafts/draft-ietf-syslog-protocol-23.txt
221
http://www.ietf.org/internet-drafts/draft-ietf-syslog-transport-tls-11.txt.
222
* The capability to encrypt log connections using TLS has been added.
225
* Log statements can be embedded into each other, making it possible to
226
design complex log paths. That way for example the results of a filter
227
can be sent to multiple destinations, or it can be sent to a
228
destination unchanged, and partly rewritten for the other destination.
231
* The encoding of source files can be set for proper character
232
conversion (internally syslog-ng represents every message in UTF-8).
235
* The syslog-ng application assigns a unique message identification
236
number to every log message, making it easy to detect if any messages
238
* The syslog-ng application can read, process, and rewrite structured
239
messages (e.g., Apache webserver logs) using templates and
240
regular expressions. Both messages with fixed field sizes and fields
241
separated with delimiters (e.g., comma-separated values) are
246
This is a source code only release, no binary packages are available at this
247
time. Those will be provided at a later date.
249
The documentation of syslog-ng OSE 3.0, including the installation and user
250
guides is be available at:
251
http://www.balabit.com/support/documentation/?product=syslog-ng
2
Tue, 16 Mar 2010 17:15:40 +0100
5
* Fixed Solaris 10 SMF script to properly handle svcadm refresh
7
* Fixed a possible segmentation fault for unix-dgram/unix-stream
8
destinations on some (non-Linux) platforms.
9
* Fixed processing empty log entries when using the syslog() protocol.
10
* Fixed processing partially received syslog messages.
13
* Decrease the frequency of gettimeofday() calls during syslog-ng
14
operation, as gettimeofday() is expensive to call on some
16
* The SQL destination will only attempt to INSERT a given log
17
message 3 times, and after that it gives up, instead of trying
19
* Tru64 portability fixes.
20
* The functional test program was improved to check the new RFC5424
24
Fri, 18 Dec 2009 09:19:39 +0100
27
* Fixed two major memory leaks, one on input messages, one in
29
* Fixed escaped structured data processing.
30
* Fixed expanding SDATA references in templates which have multiple
31
dots in its name (e.g. when an OID is present in the name of the
33
* pdbtool now correctly zero pads month and day fields in publish
34
date of the merged patterndb file.
35
* pdbtool won't link to unnecessary libraries, which fixes a
36
compilation problem on Solaris with flex installed.
40
Sun, 29 Nov 2009 16:25:18 +0100
42
This is the first public release of syslog-ng Open Source Edition 3.1.
44
syslog-ng 3.1 is the first so called "feature release" of syslog-ng,
45
as such its support period ends when either the next feature (named
46
3.2) or the next stable (named 4.0) version is published.
49
* Support for patterndb v2 and v3 format, along with a bunch of new
50
parsers: ANYSTRING, IPv6, IPvANY and FLOAT.
52
* Added a new "pdbtool" utility to manage patterndb files: convert
53
them from v1 or v2 format, merge mulitple patterndb files into one
54
and look up matching patterns given a specific message.
56
* Support for message tags: tags can be assigned to log messages as
57
they enter syslog-ng: either by the source driver or via patterndb.
58
Later it these tags can be used for efficient filtering.
60
* Added support for rewriting structured data.
62
* Macros and name-value pairs got a little tighter integration,
63
in filters where syslog-ng 3.0 was limited to only use name-value
64
pairs, with 3.1 you can also use macros.
66
* Enhanced dynamic name-value performance by a factor of three.
68
* Some parsers got additional features: NUMBER is now able to parse
69
hexadecimal numbers, ESTRING is now able to search for multiple
70
characters as the end of the string.
72
* Added non-standard and non-portable facility codes (range 10-15),
73
decouple syslog-ng facility name information from the system used
74
to compile syslog-ng on.
added
removed
NEWS
