[ale] syslog entries (EXPLAINED)

[ari]

heh... i believe it's a feature of syslogd 1.3-3.  try adding "-m 0" to your
syslogd runtime arguments (i.e. in the rc file which invokes it).
alternatively, try adding -m 1, which makes it put a "-- MARK --" in there
every minute.  Programs can't log to syslog in that manner.

here, try this:

/*** begin mark.c ***/
#include <stdio.h>
#include <syslog.h>

main() {
    printf("sending mark...\n");
    openlog("stuff", LOG_PERROR, LOG_MAIL);
    syslog(LOG_ERR, "-- MARK --");
    closelog();
}
/*** end mark.c ***/

this should theoretically log to your mail log.
now, experiment with this, and change "stuff" around to whatever you want...
you can use "" or NULL, or any other pointer string.  but any way you do it,
you end up with syslogd adding a colon (":") to the end of that string.

ari



Matt Shade (mss at atl.hp.com) said this stuff:

> Are you sure about that? I just installed 2.0.34 on a machine and it
> shows the same entry in /var/log/messages. I KNOW I'm not running any
> programs like that. It almost looks like it starts after I rlogin from
> another machine, but that could be coincidence. Did you find any other
> reason for this?
> 
> 
> logan at snarf.burdell.org wrote:
> > 
> >         Thanks all!  We got it figured out... a program he was using to
> > sync with an atomic clock (Idunno...I guess he doesn't have enough to
> > do...) was making that "---- MARK ----" entry.
> > 
> >         Thanks again,
> >         --Logan
> > 
> >      Logan Johnson || logan at snarf.wreck.org
> >      Peznet Complex: http://snarf.wreck.org
> 
> -- 
>      __        _______________________________
>     / /                                       |Matt Shade (RCE)
>    / /________  HEWLETT PACKARD COMPANY       |WWARC HP3000 MPE/OS Team
>   / /__ / /_ _/ North American Response Center|mss at atl.hp.com
>  / / / / /_/ /  20 Perimeter Summit Boulevard |Matt Shade /HP-USA,om41
> /_/ /_/ /___/   Atlanta, Georgia  30319 /USA  |Phone: 404/T 648-3076
>      / /       _______________________________|Fax:   404/  648-1755
>     /_/