Bug 256465

Summary:	[syslogd] [regression] Lost ability to accept and write some remote logs
Product:	Base System	Reporter:	Eugene Grosbein <eugen>
Component:	bin	Assignee:	Eugene Grosbein <eugen>
Status:	Closed FIXED
Severity:	Affects Some People	Keywords:	regression
Priority:	---	Flags:	eugen: mfc-stable13+ eugen: mfc-stable12+ eugen: mfc-stable11+
Version:	11.4-STABLE
Hardware:	Any
OS:	Any

Description Eugene Grosbein freebsd_committer

2021-06-07 09:44:27 UTC

MFC r335059 to stable/11 brought a regression: now syslogd in default RFC 3164 mode drops incoming messages it cannot parse. Previously, it accepted it and wrote as-is.

Running syslogd in debug mode gives errors such as:

Invalid PRI from 10.45.64.237

For logs from Cisco SCE8000:

107: 01:15:21: %USER-6-SESSION_ACCEPTED: CPU#000 A Telnet session from X.X.X.X was established.
108: 01:15:21: %USER-6-SESSION_STARTED_TRAP: CPU#000 Telnet session started from X.X.X.X

Please unbreak it making the following configuration work again:

+10.45.64.237
*.* /var/log/sce.log

Comment 1 Eugene Grosbein freebsd_committer

2021-10-27 09:00:33 UTC

Fixed by myself.