In trying to use the module omspoof with 5.5.6 it looks like there is a
problem.
the debug file shows a couple errors (entry points not present in module)
followed by 'tried selector action for omudpspoof: -2001'
then a couple of lines later when defining
$ActionUDPSpoofSourceNameTemplate it gets the error 'unkown config, did
you forget to load a module?'
David Lang
5258.815979000:2aced8a35ac0: cfline: '$ModLoad omudpspoof'
5258.815999000:2aced8a35ac0: Requested to load module 'omudpspoof'
5258.816008000:2aced8a35ac0: loading module
'/usr/local/lib/rsyslog/omudpspoof.so'
5258.816210000:2aced8a35ac0: source file omudpspoof.c requested reference for
module 'lmnet', reference count now 4
5258.817345000:2aced8a35ac0: module of type 1 being loaded.
5258.817355000:2aced8a35ac0: entry point 'doHUP' not present in module
5258.817359000:2aced8a35ac0: entry point 'beginTransaction' not present in
module
5258.817364000:2aced8a35ac0: entry point 'endTransaction' not present in module
5258.821610000:2aced8a35ac0: tried selector action for omudpspoof: -2001
5258.822955000:2aced8a35ac0: cfline: '$template spoofaddr,"%fromhost-ip%"'
5258.822964000:2aced8a35ac0: cfline: '$ActionUDPSpoofSourceNameTemplate
spoofaddr'
5258.822973000:2aced8a35ac0: Called LogError, msg: invalid or yet-unknown
config file command - have you forgotten to load a module?
5258.822994000:2aced8a35ac0: config line NOT successfully processed
5258.823001000:2aced8a35ac0: Called LogError, msg: the last error occured in
/etc/rsyslog.conf, line 37:"$ActionUDPSpoofSourceNameTemplate spoofaddr^M"
5258.823008000:2aced8a35ac0: cfline: '$ActionUDPSpoofTargetHost 10.159.2.94'
5258.823016000:2aced8a35ac0: Called LogError, msg: invalid or yet-unknown
config file command - have you forgotten to load a module?
5258.823023000:2aced8a35ac0: config line NOT successfully processed
5258.823029000:2aced8a35ac0: Called LogError, msg: the last error occured in
/etc/rsyslog.conf, line 38:"$ActionUDPSpoofTargetHost 10.159.2.94^M"
5258.823035000:2aced8a35ac0: cfline: '*.info :omudpspoof:'
5258.823040000:2aced8a35ac0: selector line successfully processed
5258.823045000:2aced8a35ac0: - traditional PRI filter
5258.823050000:2aced8a35ac0: symbolic name: info ==> 6
5258.823057000:2aced8a35ac0: tried selector action for builtin-file: -2001
5258.823076000:2aced8a35ac0: tried selector action for builtin-pipe: -2001
5258.823081000:2aced8a35ac0: tried selector action for builtin-fwd: -2001
5258.823086000:2aced8a35ac0: tried selector action for builtin-shell: -2001
5258.823091000:2aced8a35ac0: tried selector action for builtin-discard: -2001
5258.823096000:2aced8a35ac0: tried selector action for builtin-usrmsg: -2001
5258.823102000:2aced8a35ac0: Called LogError, msg: No
$ActionOMUDPSpoofSourceNameTemplate given, can not continue with this action.
5258.823109000:2aced8a35ac0: tried selector action for omudpspoof: -2150
5258.823114000:2aced8a35ac0: error -2150 parsing config line
5258.823119000:2aced8a35ac0: config line NOT successfully processed
5258.823124000:2aced8a35ac0: Called LogError, msg: the last error occured in
/etc/rsyslog.conf, line 39:"*.info :omudpspoof:^M"
5258.823146000:2aced8a35ac0: Called LogError, msg: warning: selector line
without actions will be discarded
5258.823166000:2aced8a35ac0: Called LogError, msg: CONFIG ERROR: could not
interpret master config file '/etc/rsyslog.conf'.
5258.825979000:2aced8a35ac0: Loaded Module: Name='omudpspoof', IFVersion=5,
type=output module.
5258.825988000:2aced8a35ac0: Entry points:
5258.825993000:2aced8a35ac0: queryEtryPt: 0x2aced8c3d020
5258.825997000:2aced8a35ac0: dbgPrintInstInfo: 0x2aced8c3d1b0
5258.826002000:2aced8a35ac0: freeInstance: 0x2aced8c3d3c0
5258.826007000:2aced8a35ac0: Output Module Entry Points:
5258.826011000:2aced8a35ac0: doAction: 0x2aced8c3d410
5258.826016000:2aced8a35ac0: parseSelectorAct: 0x2aced8c3d920
5258.826020000:2aced8a35ac0: tryResume: 0x2aced8c3d330
5258.826025000:2aced8a35ac0: doHUP: 0x0
5258.826029000:2aced8a35ac0: BeginTransaction: 0x0
5258.826034000:2aced8a35ac0: EndTransaction: 0x0
5258.826038000:2aced8a35ac0:
5258.835249000:2aced8a35ac0: Command 'actionomudpspoofdefaulttemplate':
5258.835254000:2aced8a35ac0: type : 11
5258.835258000:2aced8a35ac0: pData: 0x2aced8e3e7d0
5258.835263000:2aced8a35ac0: Hdlr : 0x0
5258.835267000:2aced8a35ac0: Owner: 0x0
5258.835271000:2aced8a35ac0:
5258.835276000:2aced8a35ac0: Command 'actionomudpspoofsourcenametemplate':
5258.835281000:2aced8a35ac0: type : 11
5258.835285000:2aced8a35ac0: pData: 0x2aced8e3e7d8
5258.835290000:2aced8a35ac0: Hdlr : 0x0
5258.835294000:2aced8a35ac0: Owner: 0x0
5258.835298000:2aced8a35ac0:
5258.835303000:2aced8a35ac0: Command 'actionomudpspooftargethost':
5258.835307000:2aced8a35ac0: type : 11
5258.835312000:2aced8a35ac0: pData: 0x2aced8e3e7e0
5258.835316000:2aced8a35ac0: Hdlr : 0x0
5258.835320000:2aced8a35ac0: Owner: 0x0
5258.835325000:2aced8a35ac0:
5258.835329000:2aced8a35ac0: Command 'actionomudpspooftargetport':
5258.835334000:2aced8a35ac0: type : 11
5258.835338000:2aced8a35ac0: pData: 0x2aced8e3e7e8
5258.835342000:2aced8a35ac0: Hdlr : 0x0
5258.835347000:2aced8a35ac0: Owner: 0x0
5258.835351000:2aced8a35ac0:
5258.835356000:2aced8a35ac0: Command 'actionomudpspoofsourceportstart':
5258.835360000:2aced8a35ac0: type : 6
5258.835364000:2aced8a35ac0: pData: 0x2aced8e3e7b8
5258.835369000:2aced8a35ac0: Hdlr : 0x0
5258.835373000:2aced8a35ac0: Owner: 0x0
5258.835377000:2aced8a35ac0:
5258.835382000:2aced8a35ac0: Command 'actionomudpspoofsourceportend':
5258.835386000:2aced8a35ac0: type : 6
5258.835391000:2aced8a35ac0: pData: 0x2aced8e3e7bc
5258.835395000:2aced8a35ac0: Hdlr : 0x0
5258.835400000:2aced8a35ac0: Owner: 0x0
5258.835404000:2aced8a35ac0:
_______________________________________________
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com
