summaryrefslogtreecommitdiffstats
path: root/tools/omfwd.c
Commit message (Collapse)AuthorAgeFilesLines
* added tcp output rebinding option.Rainer Gerhards2009-07-141-0/+6
| | | | needs some more testing and doc
* Merge branch 'beta'Rainer Gerhards2009-07-131-2/+2
|\
| * Merge branch 'v3-stable' into v4-betaRainer Gerhards2009-07-131-2/+2
| |\ | | | | | | | | | | | | Conflicts: ChangeLog
| | * fix compile error in zip sender patchRainer Gerhards2009-07-131-2/+2
| | | | | | | | | | | | | | | | | | ... at least I was smart enough to remind me that I did not do one test ;) That reminder was the compiler error. Now removed and test done ;) [simple things tend to work, lol]
| | * bugfix: sending syslog messages with zip compression did not workRainer Gerhards2009-07-131-2/+2
| | |
| * | bugfix: omfwd segfault when debugging is turned onRainer Gerhards2009-07-091-2/+0
| | |
* | | first version supporting udp spoofing and non-spoofing at the same timeRainer Gerhards2009-07-091-2/+0
| | | | | | | | | | | | | | | | | | omudpspoof is now a dedicated output module. It's calling semantics so far are based on omfwd, plus the need for the template to have the IP address as a string in the starting position.
* | | moved udp spoofing code to its own output module (omudpspoof)Rainer Gerhards2009-07-091-108/+12
| | |
* | | Merge branch 'master' into udpspoofRainer Gerhards2009-07-091-18/+55
|\| | | | | | | | | | | | | | Conflicts: tools/omfwd.c
| * | re-enabled pipe, tty and console in omfileRainer Gerhards2009-06-121-0/+1
| | | | | | | | | | | | | | | | | | | | | ... by moving code to stream.c. Thanks to the new design, new cases are not really needed, resulting in cleaner code. I also did a cleanup of header file usage as a side-activity.
| * | added ability for the UDP output action to rebind its send socket after ↵Rainer Gerhards2009-05-291-19/+50
| | | | | | | | | | | | | | | | | | | | | | | | sending n messages New config directive $ActionSendUDPRebindInterval added for the purpose. By default, rebinding is disabled. This is considered useful for load balancers.
| * | fixed some problems with "make check"Demo2009-03-311-1/+1
| | | | | | | | | | | | | | | interestingly, they manifested on Debian, only, but potentially existed on other platforms, too.
| * | bugfix: fixed some segaults on SolarisRainer Gerhards2009-03-251-1/+0
| | | | | | | | | | | | where vsprintf() does not check for NULL pointers
* | | changed imudp so that it supports sender spoofing.David Lang2009-07-081-10/+100
| |/ |/| | | | | | | | | | | | | This patch disables non-spoofed mode, it is primarily a code contribution to facilitate building a full-blown, configurable spoofing capabity. But obviously it can also be used in cases where only spoofing is desired. Signed-off-by: Rainer Gerhards <rgerhards@adiscon.com>
* | some minor bugfixesRainer Gerhards2009-06-181-1/+1
|/ | | | | | | | | | | | | | | - bugfix: invalid error message issued if $inlcudeConfig was on an empty set of files (e.g. *.conf, where none such files existed) thanks to Michael Biebl for reporting this bug - bugfix: when run in foreground (but not in debug mode), a debug message ("DoDie called") was emitted at shutdown. Removed. thanks to Michael Biebl for reporting this bug - bugfix: some garbagge was emitted to stderr on shutdown. This garbage consisted of file names, which were written during startup (key point: not a pointer error) thanks to Michael Biebl for reporting this bug - bugfix: startup and shutdown message were emitted to stdout thanks to Michael Biebl for reporting this bug
* removed compile time fixed message size limit (was 2K)Rainer Gerhards2008-09-021-3/+10
| | | | | The limit can now be set via $MaxMessageSize global config directive (finally gotten rid of MAXLINE ;))
* bugfix: IPv6 addresses could not be specified in forwarding actionsRainer Gerhards2008-08-051-2/+17
| | | | | | New syntax @[addr]:port introduced to enable that. Root problem was IPv6 addresses contain colons. Also somewhat enhanced debugging messages.
* bugfix: UDP syslog forwarding did not work on all platformsRainer Gerhards2008-07-141-3/+6
| | | | | | the ai_socktype was incorrectly set to 1. On some platforms, this lead to failing name resolution (e.g. FreeBSD 7). Thanks to HKS for reporting the bug.
* Merge branch 'beta'Rainer Gerhards2008-07-011-15/+7
| | | | | | | | | | | | | | | Conflicts: ChangeLog conf.c doc/Makefile.am doc/manual.html omfwd.c plugins/omgssapi/omgssapi.c This was a bit hard to merge; if there are problems, they may be in the area of the new "comment in action line" code that came from the beta.
* added (internal) error codes to error messagesRainer Gerhards2008-06-271-7/+7
| | | | | Also added redirector to web description of error codes closes bug http://bugzilla.adiscon.com/show_bug.cgi?id=20
* somewhat improved plain tcp syslog reliabilityRainer Gerhards2008-06-091-1/+6
| | | | | | ...by doing a connection check before sending. Credits to Martin Schuette for providing the idea. Details are available at http://blog.gerhards.net/2008/06/reliable-plain-tcp-syslog-once-again.html
* bugfix: removed some memory leaks in TLS codeRainer Gerhards2008-06-041-7/+21
|
* Merge branch 'ietf-tls'Rainer Gerhards2008-05-271-23/+15
|\
| * changed config directive name to reflect different useRainer Gerhards2008-05-221-23/+15
| | | | | | | | | | | | $ActionSendStreamDriverCertFingerprint is now $ActionSendStreamDriverPermittedPeer and can be used both for fingerprint and name authentication (similar to the input side)
* | Merge branch 'ietf-tls'Rainer Gerhards2008-05-211-18/+77
|\| | | | | | | | | | | Conflicts: ChangeLog
| * first implementation of TLS server client authentication checkRainer Gerhards2008-05-191-15/+35
| | | | | | | | | | | | | | The TLS server now checks the client fingerprint. This works, but is highly experimental. Needs to be refined for practice. Also: - implemented permittedPeers helper construct to store names - changed omfwd implementation to use new permittedPeers
| * regained netstream driver genericity; improved driversRainer Gerhards2008-05-171-3/+9
| | | | | | | | | | | | | | | | | | - made action logic pass optional auth params only if they are actually configured - added new authMode and Fingerprint methods to ptcp netstream driver (keeping them once again generic) - added diagnostics messages when invalid auth modes were configured
| * added first rough ability to authenticate the server against its certificateRainer Gerhards2008-05-161-18/+51
| | | | | | | | | | | | | | | | | | | | This is very experimental and needs some more work. It probably even segfaults - but the base code is there and running. The rest is refinement. While working on this, I did these two bugfixes: - bugfix: small mem leak in omfwd on exit (strmdriver name was not freed) - bugfix: $ActionSendStreamDriver had no effect
* | bugfix: default syslog port was no longer used if none was configured.varmojfekoj2008-05-211-1/+1
|/ | | | Signed-off-by: Rainer Gerhards <rgerhards@adiscon.com>
* invalid strdup when no driver name was set caused segfaultRainer Gerhards2008-05-051-1/+2
|
* support for different forwarding stream drivers addedRainer Gerhards2008-05-051-2/+15
| | | | they can now be set on an action-by-action basis
* added $InputTCPServerStreamDriverMode config directiveRainer Gerhards2008-04-301-1/+1
|
* fixed problem with module unload sequenceRainer Gerhards2008-04-291-12/+6
|
* added $ActionSendStreamDriverMode config directiveRainer Gerhards2008-04-281-0/+6
|
* added new netstrms classRainer Gerhards2008-04-231-4/+19
| | | | netstrms is at the top layer of the socket abstraction
* converted netstrm into generic netstrm and the nsd_pctp driverRainer Gerhards2008-04-181-0/+2
|
* improvements in omfwd and cleanup of omgssapiRainer Gerhards2008-04-171-4/+30
| | | | | - some (small) cleanup of omgssapi - optimized omfwed, now loads TCP code only if this is actually necessary
* modified omfwd to work with netstrm (and also did some cleanup)Rainer Gerhards2008-04-171-303/+238
|
* moved "family" variable to global data poolRainer Gerhards2008-04-171-2/+6
|
* some more cleanupRainer Gerhards2008-04-161-0/+643
reduced dependencies, moved non-runtime files to its own directory except for some whom's status is unclear