Will cross-reference in the kill-feature PR.

On Tue, Nov 3, 2015 at 7:37 PM, singh.janmejay <[email protected]> wrote:
> Sorry for the delay. Here is the PR: 
> https://github.com/rsyslog/rsyslog/pull/578
>
> On Tue, Nov 3, 2015 at 6:02 PM, Rainer Gerhards
> <[email protected]> wrote:
>> 2015-11-03 12:54 GMT+01:00  <[email protected]>:
>>> Hello,
>>> As far as I see, today is the release data of the next rsyslog version.
>>> I did not see any changes about the lookup diffs, Janmejay promised, so I'm 
>>> quite nerverous that the new release will no longer contain the 
>>> lookup-tables.
>>
>> Please have a look here for status updates:
>> https://github.com/rsyslog/rsyslog/pull/544
>>
>> In short: I won't remove it this release, as I have no longer been
>> tortured with CVEs and I think we can let it stand as is - NOT
>> officially existing - for a bit longer. I hope we can merge something
>> solid into the december or january relaese.
>>
>> Rainer
>>>
>>> Please do not remove it, as it works fine (after the last patch) and I (and 
>>> possibly others) use it already in production.
>>> If it is needed I will help to document the functionality as it exists 
>>> right now.
>>>
>>> Best regards,
>>> Christopher
>>>
>>>
>>> ------------------------------------------------------------------------------------------------------------
>>>
>>>
>>>
>>>
>>>
>>>
>>>
>>>
>>> Hello,
>>> I have never heared such a nonsense.
>>> Actually the number of applications that does not include features that are 
>>> not official documented shoult be extremly limited.
>>>
>>> The functionality is really usefull and already in big landscapes 
>>> productive.
>>> Please, please do NOT remove the lookup-table from the main branch.
>>> The functionaltiy works fine, I'm using this since march and I did not have 
>>> any issue since the latest patch of janmejay.
>>>
>>> Even the "concept" is not fully implemented (e.g. smaller things like 
>>> nomatch) the main part works fine.
>>>
>>>
>>> My suggestion would be to document everything which is currently 
>>> implemented and keep the "conceptual documentation" as it is.
>>> So the Maintainer should no longer have an issue with it.
>>>
>>>
>>> If the main issue it the time to document the already implemented features, 
>>> I can create a patch.
>>>
>>>
>>> Chris
>>>
>>>
>>>
>>>> Gesendet: Dienstag, 06. Oktober 2015 um 07:36 Uhr
>>>> Von: "David Lang" <[email protected]>
>>>> An: rsyslog-users <[email protected]>
>>>> Betreff: Re: [rsyslog] Separation of actions based on log source - with 
>>>> good performance
>>>>
>>>> a CVE for something that requires manually enabling an experimental 
>>>> feature???
>>>>
>>>> it would be one thing if a default config had the problem, or if it was
>>>> something entirely dependent on remote data.
>>>>
>>>> I would be very tempted to respond to the CVE with "don't enable this 
>>>> incomplete
>>>> feature" as the solution. It's very common for incomplete features to be
>>>> included in released versions
>>>>
>>>> grumble, we have enough real bugs to worry about.
>>>>
>>>> David Lang
>>>>
>>>> On Tue, 6 Oct 2015, Rainer Gerhards wrote:
>>>>
>>>> > Date: Tue, 6 Oct 2015 07:15:31 +0200
>>>> > From: Rainer Gerhards <[email protected]>
>>>> > Reply-To: rsyslog-users <[email protected]>
>>>> > To: rsyslog-users <[email protected]>
>>>> > Subject: Re: [rsyslog] Separation of actions based on log source - with 
>>>> > good
>>>> >     performance
>>>> >
>>>> > Sorry, folks, good intent always seems to find someone who turns it
>>>> > into negative. I was yesterday contacted by a distro maintainer who
>>>> > wants to turn this bug in the officially non-existant lookup table
>>>> > feature into a CVE and insists that it is a vuln even after the
>>>> > argument that the feature never oficially existed.
>>>> >
>>>> > It looks like it was a bad idea to merge potentially useful yet
>>>> > incomplete code into the main branch (and documenting it to be not
>>>> > present). It looks like I need to re-think my stance on experimental
>>>> > features.
>>>> >
>>>> > Anyhow, I really don't want to support the argument that something
>>>> > non-existing can be a CVE. As such, I will create a new
>>>> > master-insecure branch, which will be a clone of the current master
>>>> > branch. Then I'll remove the lookup table code, so that the code base
>>>> > matches the documentation. I really don't want to create a general
>>>> > principle here that we need to create CVEs (and patched) for something
>>>> > that was just added as a convenience for a handful of folks who were
>>>> > ready to take a risk.
>>>> >
>>>> > If there is sufficient interest, we can consider officially adding
>>>> > this feature to the January 8.15 release iff it is ready by then.
>>>> > @janmejay: please let me know if you would like to continue with your
>>>> > work on lookup tables under this new situation.
>>>> >
>>>> > As soon as I have time, I'll check what else needs to be removed. Not
>>>> > sure about the ./contributed branch, because the project cannot
>>>> > guarantee at all this is bug-free. It's documented to be so, but if
>>>> > that is not sufficient, it should probably live only in the
>>>> > master-insecure branch.
>>>> >
>>>> > Rainer
>>>> >
>>>> > 2015-10-02 17:29 GMT+02:00 singh.janmejay <[email protected]>:
>>>> >> As of now it returns empty string for no-match. I guess we should go 
>>>> >> ahead
>>>> >> with it in its current form. We can add default value any time later
>>>> >> without breaking compatibility(it'd default to "").
>>>> >>
>>>> >> I'll add a test for multiple tables on Monday.
>>>> >>
>>>> >> On Fri, Oct 2, 2015, 7:16 PM  <[email protected]> wrote:
>>>> >>
>>>> >>> Hi,
>>>> >>> No, I didn't. I even didn't realize the patch.
>>>> >>>
>>>> >>> It seems to be exactly the related issue. So I don't expect any further
>>>> >>> issues.
>>>> >>> I will use the new version on 2 systems. If there is any other issue, I
>>>> >>> will let you know.
>>>> >>> Release data for next rsyslog version is quite far so enough time to
>>>> >>> test... ;)
>>>> >>>
>>>> >>> The missing implementation of "nomatch" (default) entry as described at
>>>> >>>  http://www.rsyslog.com/doc/lookup_tables.html
>>>> >>> would from my opinion require changes:
>>>> >>>
>>>> >>> Arround line 132 of lookup.c file (save of value)
>>>> >>> Arround line 243 of lookup.c file (search in lookuptable fails, so 
>>>> >>> return
>>>> >>> nomatch value.
>>>> >>>
>>>> >>>
>>>> >>> regards
>>>> >>> Chris
>>>> >>>
>>>> >>>
>>>> >>> > Gesendet: Donnerstag, 01. Oktober 2015 um 16:57 Uhr
>>>> >>> > Von: "singh.janmejay" <[email protected]>
>>>> >>> > An: rsyslog-users <[email protected]>
>>>> >>> > Betreff: Re: [rsyslog] Separation of actions based on log source - 
>>>> >>> > with
>>>> >>> good performance
>>>> >>> >
>>>> >>> > Yes, if you build off master, that problem should go away (if it was 
>>>> >>> > due
>>>> >>> to
>>>> >>> > lookup-table).
>>>> >>> >
>>>> >>> > On Thu, Oct 1, 2015, 7:00 PM Rainer Gerhards 
>>>> >>> > <[email protected]>
>>>> >>> > wrote:
>>>> >>> >
>>>> >>> > > 2015-10-01 15:14 GMT+02:00 singh.janmejay 
>>>> >>> > > <[email protected]>:
>>>> >>> > > > If you can share output of all thread backtrace we can confirm if
>>>> >>> this
>>>> >>> > > > is the cause.
>>>> >>> > >
>>>> >>> > > let's first double-check: Christopher, did you use yesterday 
>>>> >>> > > evening's
>>>> >>> > > master branch? Because that contains a patch from Janmejay that I
>>>> >>> > > think causes the problem for you. Or am I wrong, Janmejay?
>>>> >>> > >
>>>> >>> > > Rainer
>>>> >>> > > >
>>>> >>> > > > On Thu, Oct 1, 2015 at 2:30 PM,  <[email protected]> 
>>>> >>> > > > wrote:
>>>> >>> > > >> Hi,
>>>> >>> > > >> Ups I was not detailed enough.
>>>> >>> > > >> The problem with rsyslog-die does not always occur. But 
>>>> >>> > > >> sometimes
>>>> >>> > > unexpectedly.
>>>> >>> > > >> In my environments the files grow or reduce sometimes, so maybe 
>>>> >>> > > >> this
>>>> >>> > > has something do with it (or the processing delay).
>>>> >>> > > >>
>>>> >>> > > >> regards
>>>> >>> > > >> Chris
>>>> >>> > > >>
>>>> >>> > > >>
>>>> >>> > > >> -----Ursprüngliche Nachricht-----
>>>> >>> > > >> Gesendet: Donnerstag, 01 Oktober 2015 um 10:57:37 Uhr
>>>> >>> > > >> Von: [email protected]
>>>> >>> > > >> An: "singh.janmejay" <[email protected]>,rsyslog-users <
>>>> >>> > > [email protected]>
>>>> >>> > > >> Betreff: Re: [rsyslog] Separation of actions based on log 
>>>> >>> > > >> source -
>>>> >>> with
>>>> >>> > > good performance
>>>> >>> > > >> Hi,
>>>> >>> > > >> For my opinion it is really good to support looku-tables 
>>>> >>> > > >> official.
>>>> >>> > > >> Thanks for the work on the implementation David & Rainer.
>>>> >>> > > >>
>>>> >>> > > >> I have some experiences using lookup-Tables with > 2500 Entries.
>>>> >>> > > >>
>>>> >>> > > >> There are 2 open issues:
>>>> >>> > > >>
>>>> >>> > > >> 1. There is a bug when sending SIGHUP and reprocessing big 
>>>> >>> > > >> lists,
>>>> >>> which
>>>> >>> > > leads to die of rsyslogd.
>>>> >>> > > >> I spend some time to identify this bug, unfortunately I'm still 
>>>> >>> > > >> not
>>>> >>> > > able to find the exact reason.
>>>> >>> > > >> The problem seems to occur not directly after sending SIGHUP, 
>>>> >>> > > >> but
>>>> >>> > > later. Maybe this has something to do with Queues.
>>>> >>> > > >>
>>>> >>> > > >> 2. The "default" Value is not implemented. This should be 
>>>> >>> > > >> mentioned
>>>> >>> in
>>>> >>> > > the documentation or implemented.
>>>> >>> > > >> I guess its quite less work, but I'm not sure how soon I find 
>>>> >>> > > >> the
>>>> >>> time
>>>> >>> > > to do all the things arround the pure developement... ;)
>>>> >>> > > >>
>>>> >>> > > >>
>>>> >>> > > >>
>>>> >>> > > >> regards
>>>> >>> > > >> Chris
>>>> >>> > > >>
>>>> >>> > > >> -----Ursprüngliche Nachricht-----
>>>> >>> > > >> Gesendet: Donnerstag, 01 Oktober 2015 um 09:41:26 Uhr
>>>> >>> > > >> Von: "singh.janmejay" <[email protected]>
>>>> >>> > > >> An: rsyslog-users <[email protected]>
>>>> >>> > > >> Betreff: Re: [rsyslog] Separation of actions based on log 
>>>> >>> > > >> source -
>>>> >>> with
>>>> >>> > > good performance
>>>> >>> > > >> OK, allow me a few days, I'll add one more test for multiple 
>>>> >>> > > >> tables.
>>>> >>> > > Will
>>>> >>> > > >> make the doc change after that.
>>>> >>> > > >>
>>>> >>> > > >> --
>>>> >>> > > >> Regards,
>>>> >>> > > >> Janmejay
>>>> >>> > > >>
>>>> >>> > > >> PS: Please blame the typos in this mail on my phone's 
>>>> >>> > > >> uncivilized
>>>> >>> soft
>>>> >>> > > >> keyboard sporting it's not-so-smart-assist technology.
>>>> >>> > > >>
>>>> >>> > > >> On Oct 1, 2015 12:29 PM, "Rainer Gerhards" <
>>>> >>> [email protected]>
>>>> >>> > > wrote:
>>>> >>> > > >>
>>>> >>> > > >>> 2015-09-29 20:58 GMT+02:00 singh.janmejay <
>>>> >>> [email protected]>:
>>>> >>> > > >>> > Sweet, plan on playing with it tomorrow.
>>>> >>> > > >>>
>>>> >>> > > >>> If you have verified that the current functionality works fine
>>>> >>> after
>>>> >>> > > >>> your patch, I wouldn't object if you modify the doc to tell the
>>>> >>> world
>>>> >>> > > >>> that this part of lookup tables is now officially supported. we
>>>> >>> could
>>>> >>> > > >>> release with 8.14. I think what currently exists is already 
>>>> >>> > > >>> pretty
>>>> >>> > > >>> useful and if we feel confident enough it works, we should 
>>>> >>> > > >>> release
>>>> >>> it.
>>>> >>> > > >>>
>>>> >>> > > >>> Rainer
>>>> >>> > > >>> >
>>>> >>> > > >>> > --
>>>> >>> > > >>> > Regards,
>>>> >>> > > >>> > Janmejay
>>>> >>> > > >>> >
>>>> >>> > > >>> > PS: Please blame the typos in this mail on my phone's 
>>>> >>> > > >>> > uncivilized
>>>> >>> > > soft
>>>> >>> > > >>> > keyboard sporting it's not-so-smart-assist technology.
>>>> >>> > > >>> >
>>>> >>> > > >>> > On Sep 30, 2015 12:16 AM, "Rainer Gerhards" <
>>>> >>> > > [email protected]>
>>>> >>> > > >>> > wrote:
>>>> >>> > > >>> >
>>>> >>> > > >>> >> It's a long time since I implemented what currently is 
>>>> >>> > > >>> >> there. It
>>>> >>> > > should
>>>> >>> > > >>> be
>>>> >>> > > >>> >> relatively solid with probably some minor glitches. It 
>>>> >>> > > >>> >> provides
>>>> >>> the
>>>> >>> > > code
>>>> >>> > > >>> >> functionality as far as I remember.
>>>> >>> > > >>> >>
>>>> >>> > > >>> >> Rainer
>>>> >>> > > >>> >>
>>>> >>> > > >>> >> Sent from phone, thus brief.
>>>> >>> > > >>> >> Am 29.09.2015 20:07 schrieb "singh.janmejay" <
>>>> >>> > > [email protected]
>>>> >>> > > >>> >:
>>>> >>> > > >>> >>
>>>> >>> > > >>> >> > Rainer/David,
>>>> >>> > > >>> >> >
>>>> >>> > > >>> >> > Exactly how much of lookup_table functionality is 
>>>> >>> > > >>> >> > implemented?
>>>> >>> > > >>> >> >
>>>> >>> > > >>> >> > What can I not do with it? (you mentioned something about
>>>> >>> single
>>>> >>> > > table
>>>> >>> > > >>> >> > in this thread, can you please elaborate?).
>>>> >>> > > >>> >> >
>>>> >>> > > >>> >> > On Tue, Mar 31, 2015 at 7:23 PM, Rainer Gerhards
>>>> >>> > > >>> >> > <[email protected]> wrote:
>>>> >>> > > >>> >> > > 2015-03-31 15:46 GMT+02:00  <[email protected]>:
>>>> >>> > > >>> >> > >> Hi,
>>>> >>> > > >>> >> > >> Do you have some experience how large Lookup-tables 
>>>> >>> > > >>> >> > >> can be
>>>> >>> > > until
>>>> >>> > > >>> there
>>>> >>> > > >>> >> > are "negative" effects?
>>>> >>> > > >>> >> > >> 2400 entries seems to work fine :)
>>>> >>> > > >>> >> > >
>>>> >>> > > >>> >> > > IIRC the current partial implementation is O(log n), so 
>>>> >>> > > >>> >> > > no
>>>> >>> > > problem.
>>>> >>> > > >>> >> > >
>>>> >>> > > >>> >> > >>
>>>> >>> > > >>> >> > >> And another question, do I loose events, when doing a 
>>>> >>> > > >>> >> > >> kill
>>>> >>> -HUP
>>>> >>> > > >>> (for
>>>> >>> > > >>> >> > update of lookup-table)?
>>>> >>> > > >>> >> > >> (e.g. client threads are hard "terminated"...)
>>>> >>> > > >>> >> > >
>>>> >>> > > >>> >> > > *should* not cause any issues.
>>>> >>> > > >>> >> > >
>>>> >>> > > >>> >> > > Rainer
>>>> >>> > > >>> >> > >>
>>>> >>> > > >>> >> > >> best regards
>>>> >>> > > >>> >> > >> Chris
>>>> >>> > > >>> >> > >>
>>>> >>> > > >>> >> > >>
>>>> >>> > > >>> >> > >>
>>>> >>> > > >>> >> > >> Gesendet: Mittwoch, 25. März 2015 um 19:28 Uhr
>>>> >>> > > >>> >> > >> Von: "David Lang" <[email protected]>
>>>> >>> > > >>> >> > >> An: rsyslog-users <[email protected]>
>>>> >>> > > >>> >> > >> Betreff: Re: [rsyslog] Separation of actions based on 
>>>> >>> > > >>> >> > >> log
>>>> >>> > > source -
>>>> >>> > > >>> >> with
>>>> >>> > > >>> >> > good performance
>>>> >>> > > >>> >> > >> On Wed, 25 Mar 2015, [email protected] wrote: >
>>>> >>> Hi, >
>>>> >>> > > I was
>>>> >>> > > >>> >> > doing some experiments with the lookup-table. > Looks 
>>>> >>> > > >>> >> > really
>>>> >>> nice
>>>> >>> > > and
>>>> >>> > > >>> the
>>>> >>> > > >>> >> > performance is promising. > (Unfortunately the evaluation 
>>>> >>> > > >>> >> > of
>>>> >>> > > "nomatch"
>>>> >>> > > >>> >> > attribute is currently not implemented...) > > Never the
>>>> >>> less: >
>>>> >>> > > My
>>>> >>> > > >>> plan
>>>> >>> > > >>> >> > is, to do diffent actions based on the type of host, 
>>>> >>> > > >>> >> > mapped
>>>> >>> in the
>>>> >>> > > >>> >> > lookup-list. > For testing purposes, I use alway omfile. 
>>>> >>> > > >>> >> > > >
>>>> >>> > > >>> >> Unfortunately
>>>> >>> > > >>> >> > it does not work, to change the ruleset based on the
>>>> >>> variable. >
>>>> >>> > > Is
>>>> >>> > > >>> there
>>>> >>> > > >>> >> > any other option or is there any mistake? for omfile you 
>>>> >>> > > >>> >> > can
>>>> >>> use
>>>> >>> > > the
>>>> >>> > > >>> >> > dynafile approach to use the return variable, for remote
>>>> >>> things
>>>> >>> > > you
>>>> >>> > > >>> would
>>>> >>> > > >>> >> > need to do an if then else approach for performance 
>>>> >>> > > >>> >> > reasons
>>>> >>> many
>>>> >>> > > of
>>>> >>> > > >>> the
>>>> >>> > > >>> >> > fields in rsyslog do not accept variables. This allows 
>>>> >>> > > >>> >> > them
>>>> >>> to be
>>>> >>> > > >>> >> > computed/parsed once at startup rather than having to be
>>>> >>> > > evaluated for
>>>> >>> > > >>> >> each
>>>> >>> > > >>> >> > log message. It's a bit of a hassle when you do want to do
>>>> >>> > > something
>>>> >>> > > >>> >> > dynamic, but even in cases where you have some dynamic
>>>> >>> things, you
>>>> >>> > > >>> tend
>>>> >>> > > >>> >> to
>>>> >>> > > >>> >> > have other static things that benefit from the speedup. 
>>>> >>> > > >>> >> > David
>>>> >>> > > Lang >
>>>> >>> > > >>> ***
>>>> >>> > > >>> >> > syslog.conf *** > lookup_table(name="lookuptable"
>>>> >>> > > >>> >> > file="/etc/rsyslog.lookup") > set $!dst =
>>>> >>> lookup("lookuptable",
>>>> >>> > > >>> >> > $fromhost-ip); > ruleset(name="typea"){ > 
>>>> >>> > > >>> >> > action(type="omfile"
>>>> >>> > > >>> >> > file="/var/log/file_typea.log") > } > 
>>>> >>> > > >>> >> > ruleset(name="typea"){ >
>>>> >>> > > >>> >> > action(type="omfile" file="/var/log/file_typeb.log") > } 
>>>> >>> > > >>> >> > > > #
>>>> >>> > > Change
>>>> >>> > > >>> set
>>>> >>> > > >>> >> > default ruleset, based on sourceip > $DefaultRuleset 
>>>> >>> > > >>> >> > $!dst > >
>>>> >>> > > >>> >> > module(load="imtcp" KeepAlive="on" KeepAlive.Probes="1"
>>>> >>> > > >>> >> > KeepAlive.Interval="2" KeepAlive.Time="20") >
>>>> >>> input(type="imtcp"
>>>> >>> > > >>> >> > port="7714") > > *** lookup-table *** > { "version":1,
>>>> >>> > > >>> "nomatch":"unk",
>>>> >>> > > >>> >> > "type":"string", > "table":[ {"index":"10.3.5.4",
>>>> >>> "value":"typea"
>>>> >>> > > }, >
>>>> >>> > > >>> >> > {"index":"10.2.2.1", "value":"typea" }, > 
>>>> >>> > > >>> >> > {"index":"10.0.2.2",
>>>> >>> > > >>> >> > "value":"typeb" }, > {"index":"10.2.2.3", "value":"typeb" 
>>>> >>> > > >>> >> > } >
>>>> >>> ] >
>>>> >>> > > } >
>>>> >>> > > >>> > >
>>>> >>> > > >>> >> > best regards > Chris >   >   > > Gesendet: Dienstag, 24. 
>>>> >>> > > >>> >> > März
>>>> >>> > > 2015 um
>>>> >>> > > >>> >> 17:14
>>>> >>> > > >>> >> > Uhr > Von: [email protected] > An:
>>>> >>> > > [email protected] >
>>>> >>> > > >>> >> > Betreff: Re: [rsyslog] Separation of actions based on log
>>>> >>> source -
>>>> >>> > > >>> with
>>>> >>> > > >>> >> > good performance > Hi David, > > Thanks sounds great, I 
>>>> >>> > > >>> >> > will
>>>> >>> try
>>>> >>> > > this
>>>> >>> > > >>> in
>>>> >>> > > >>> >> > the next days :) > > Chris >   >   > > Gesendet: Montag, 
>>>> >>> > > >>> >> > 23.
>>>> >>> März
>>>> >>> > > >>> 2015 um
>>>> >>> > > >>> >> > 17:44 Uhr > Von: "David Lang" > An: rsyslog-users > 
>>>> >>> > > >>> >> > Betreff:
>>>> >>> Re:
>>>> >>> > > >>> >> [rsyslog]
>>>> >>> > > >>> >> > Separation of actions based on log source - with good
>>>> >>> performance
>>>> >>> > > >
>>>> >>> > > >>> This
>>>> >>> > > >>> >> is
>>>> >>> > > >>> >> > the sort of thing that the table lookup functionality was
>>>> >>> designed
>>>> >>> > > >>> for. >
>>>> >>> > > >>> >> > It wasn't fully implemented to the design (funding fell
>>>> >>> through),
>>>> >>> > > but
>>>> >>> > > >>> I
>>>> >>> > > >>> >> > think it works for a single table. > you could use it to 
>>>> >>> > > >>> >> > do
>>>> >>> the
>>>> >>> > > >>> mapping
>>>> >>> > > >>> >> > from your many hosts to a couple of values and then have 
>>>> >>> > > >>> >> > your
>>>> >>> > > test be
>>>> >>> > > >>> >> based
>>>> >>> > > >>> >> > on the resulting value. > > David Lang On Mon, 23 Mar 
>>>> >>> > > >>> >> > 2015 >
>>>> >>> > > [...] >
>>>> >>> > > >>> >> > >>
>>>> >>> > > >>> >> > >> _______________________________________________
>>>> >>> > > >>> >> > >> rsyslog mailing list
>>>> >>> > > >>> >> > >> http://lists.adiscon.net/mailman/listinfo/rsyslog
>>>> >>> > > >>> >> > >> http://www.rsyslog.com/professional-services/
>>>> >>> > > >>> >> > >> What's up with rsyslog? Follow
>>>> >>> https://twitter.com/rgerhards
>>>> >>> > > >>> >> > >> NOTE WELL: This is a PUBLIC mailing list, posts are
>>>> >>> ARCHIVED
>>>> >>> > > by a
>>>> >>> > > >>> >> > myriad of sites beyond our control. PLEASE UNSUBSCRIBE 
>>>> >>> > > >>> >> > and DO
>>>> >>> NOT
>>>> >>> > > >>> POST if
>>>> >>> > > >>> >> > you DON'T LIKE THAT.
>>>> >>> > > >>> >> > > _______________________________________________
>>>> >>> > > >>> >> > > rsyslog mailing list
>>>> >>> > > >>> >> > > http://lists.adiscon.net/mailman/listinfo/rsyslog
>>>> >>> > > >>> >> > > http://www.rsyslog.com/professional-services/
>>>> >>> > > >>> >> > > What's up with rsyslog? Follow
>>>> >>> https://twitter.com/rgerhards
>>>> >>> > > >>> >> > > NOTE WELL: This is a PUBLIC mailing list, posts are
>>>> >>> ARCHIVED by
>>>> >>> > > a
>>>> >>> > > >>> >> myriad
>>>> >>> > > >>> >> > of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT
>>>> >>> POST
>>>> >>> > > if you
>>>> >>> > > >>> >> > DON'T LIKE THAT.
>>>> >>> > > >>> >> >
>>>> >>> > > >>> >> >
>>>> >>> > > >>> >> >
>>>> >>> > > >>> >> > --
>>>> >>> > > >>> >> > Regards,
>>>> >>> > > >>> >> > Janmejay
>>>> >>> > > >>> >> > http://codehunk.wordpress.com
>>>> >>> > > >>> >> > _______________________________________________
>>>> >>> > > >>> >> > rsyslog mailing list
>>>> >>> > > >>> >> > http://lists.adiscon.net/mailman/listinfo/rsyslog
>>>> >>> > > >>> >> > http://www.rsyslog.com/professional-services/
>>>> >>> > > >>> >> > What's up with rsyslog? Follow 
>>>> >>> > > >>> >> > https://twitter.com/rgerhards
>>>> >>> > > >>> >> > NOTE WELL: This is a PUBLIC mailing list, posts are 
>>>> >>> > > >>> >> > ARCHIVED
>>>> >>> by a
>>>> >>> > > >>> myriad
>>>> >>> > > >>> >> > of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT
>>>> >>> POST
>>>> >>> > > if you
>>>> >>> > > >>> >> > DON'T LIKE THAT.
>>>> >>> > > >>> >> _______________________________________________
>>>> >>> > > >>> >> rsyslog mailing list
>>>> >>> > > >>> >> http://lists.adiscon.net/mailman/listinfo/rsyslog
>>>> >>> > > >>> >> http://www.rsyslog.com/professional-services/
>>>> >>> > > >>> >> What's up with rsyslog? Follow https://twitter.com/rgerhards
>>>> >>> > > >>> >> NOTE WELL: This is a PUBLIC mailing list, posts are 
>>>> >>> > > >>> >> ARCHIVED by
>>>> >>> a
>>>> >>> > > myriad
>>>> >>> > > >>> >> of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT 
>>>> >>> > > >>> >> POST
>>>> >>> if
>>>> >>> > > you
>>>> >>> > > >>> >> DON'T LIKE THAT.
>>>> >>> > > >>> > _______________________________________________
>>>> >>> > > >>> > rsyslog mailing list
>>>> >>> > > >>> > http://lists.adiscon.net/mailman/listinfo/rsyslog
>>>> >>> > > >>> > http://www.rsyslog.com/professional-services/
>>>> >>> > > >>> > What's up with rsyslog? Follow https://twitter.com/rgerhards
>>>> >>> > > >>> > NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED 
>>>> >>> > > >>> > by a
>>>> >>> > > myriad
>>>> >>> > > >>> of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT 
>>>> >>> > > >>> POST if
>>>> >>> you
>>>> >>> > > >>> DON'T LIKE THAT.
>>>> >>> > > >>> _______________________________________________
>>>> >>> > > >>> rsyslog mailing list
>>>> >>> > > >>> http://lists.adiscon.net/mailman/listinfo/rsyslog
>>>> >>> > > >>> http://www.rsyslog.com/professional-services/
>>>> >>> > > >>> What's up with rsyslog? Follow https://twitter.com/rgerhards
>>>> >>> > > >>> NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED 
>>>> >>> > > >>> by a
>>>> >>> > > myriad
>>>> >>> > > >>> of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT 
>>>> >>> > > >>> POST if
>>>> >>> you
>>>> >>> > > >>> DON'T LIKE THAT.
>>>> >>> > > >> _______________________________________________
>>>> >>> > > >> rsyslog mailing list
>>>> >>> > > >> http://lists.adiscon.net/mailman/listinfo/rsyslog
>>>> >>> > > >> http://www.rsyslog.com/professional-services/
>>>> >>> > > >> What's up with rsyslog? Follow https://twitter.com/rgerhards
>>>> >>> > > >> NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by 
>>>> >>> > > >> a
>>>> >>> > > myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT 
>>>> >>> > > POST
>>>> >>> if
>>>> >>> > > you DON'T LIKE THAT.
>>>> >>> > > >> _______________________________________________
>>>> >>> > > >> rsyslog mailing list
>>>> >>> > > >> http://lists.adiscon.net/mailman/listinfo/rsyslog
>>>> >>> > > >> http://www.rsyslog.com/professional-services/
>>>> >>> > > >> What's up with rsyslog? Follow https://twitter.com/rgerhards
>>>> >>> > > >> NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by 
>>>> >>> > > >> a
>>>> >>> > > myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT 
>>>> >>> > > POST
>>>> >>> if
>>>> >>> > > you DON'T LIKE THAT.
>>>> >>> > > >
>>>> >>> > > >
>>>> >>> > > >
>>>> >>> > > > --
>>>> >>> > > > Regards,
>>>> >>> > > > Janmejay
>>>> >>> > > > http://codehunk.wordpress.com
>>>> >>> > > > _______________________________________________
>>>> >>> > > > rsyslog mailing list
>>>> >>> > > > http://lists.adiscon.net/mailman/listinfo/rsyslog
>>>> >>> > > > http://www.rsyslog.com/professional-services/
>>>> >>> > > > What's up with rsyslog? Follow https://twitter.com/rgerhards
>>>> >>> > > > NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a
>>>> >>> myriad
>>>> >>> > > of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if 
>>>> >>> > > you
>>>> >>> > > DON'T LIKE THAT.
>>>> >>> > > _______________________________________________
>>>> >>> > > rsyslog mailing list
>>>> >>> > > http://lists.adiscon.net/mailman/listinfo/rsyslog
>>>> >>> > > http://www.rsyslog.com/professional-services/
>>>> >>> > > What's up with rsyslog? Follow https://twitter.com/rgerhards
>>>> >>> > > NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a
>>>> >>> myriad
>>>> >>> > > of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if 
>>>> >>> > > you
>>>> >>> > > DON'T LIKE THAT.
>>>> >>> > _______________________________________________
>>>> >>> > rsyslog mailing list
>>>> >>> > http://lists.adiscon.net/mailman/listinfo/rsyslog
>>>> >>> > http://www.rsyslog.com/professional-services/
>>>> >>> > What's up with rsyslog? Follow https://twitter.com/rgerhards
>>>> >>> > NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a 
>>>> >>> > myriad
>>>> >>> of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you
>>>> >>> DON'T LIKE THAT.
>>>> >>> _______________________________________________
>>>> >>> rsyslog mailing list
>>>> >>> http://lists.adiscon.net/mailman/listinfo/rsyslog
>>>> >>> http://www.rsyslog.com/professional-services/
>>>> >>> What's up with rsyslog? Follow https://twitter.com/rgerhards
>>>> >>> NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a 
>>>> >>> myriad
>>>> >>> of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you
>>>> >>> DON'T LIKE THAT.
>>>> >> _______________________________________________
>>>> >> rsyslog mailing list
>>>> >> http://lists.adiscon.net/mailman/listinfo/rsyslog
>>>> >> http://www.rsyslog.com/professional-services/
>>>> >> What's up with rsyslog? Follow https://twitter.com/rgerhards
>>>> >> NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a 
>>>> >> myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST 
>>>> >> if you DON'T LIKE THAT.
>>>> > _______________________________________________
>>>> > rsyslog mailing list
>>>> > http://lists.adiscon.net/mailman/listinfo/rsyslog
>>>> > http://www.rsyslog.com/professional-services/
>>>> > What's up with rsyslog? Follow https://twitter.com/rgerhards
>>>> > NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad 
>>>> > of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you 
>>>> > DON'T LIKE THAT._______________________________________________
>>>> rsyslog mailing list
>>>> http://lists.adiscon.net/mailman/listinfo/rsyslog
>>>> http://www.rsyslog.com/professional-services/
>>>> What's up with rsyslog? Follow https://twitter.com/rgerhards
>>>> NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad 
>>>> of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you 
>>>> DON'T LIKE THAT.
>>> _______________________________________________
>>> rsyslog mailing list
>>> http://lists.adiscon.net/mailman/listinfo/rsyslog
>>> http://www.rsyslog.com/professional-services/
>>> What's up with rsyslog? Follow https://twitter.com/rgerhards
>>> NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of 
>>> sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T 
>>> LIKE THAT.
>> _______________________________________________
>> rsyslog mailing list
>> http://lists.adiscon.net/mailman/listinfo/rsyslog
>> http://www.rsyslog.com/professional-services/
>> What's up with rsyslog? Follow https://twitter.com/rgerhards
>> NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of 
>> sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T 
>> LIKE THAT.
>
>
>
> --
> Regards,
> Janmejay
> http://codehunk.wordpress.com



-- 
Regards,
Janmejay
http://codehunk.wordpress.com
_______________________________________________
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of 
sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE 
THAT.

Reply via email to