Bug 5492 - remote syslog events lack a hostname
Summary: remote syslog events lack a hostname
Status: NEW
Alias: None
Product: Busybox
Classification: Unclassified
Component: Other (show other bugs)
Version: unspecified
Hardware: All All
: P5 normal
Target Milestone: ---
Assignee: unassigned
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2012-09-01 03:11 UTC by busybox
Modified: 2012-09-01 03:11 UTC (History)
1 user (show)

See Also:
Host:
Target:
Build:

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description busybox 2012-09-01 03:11:23 UTC 
syslogd appears to not be sending a hostname for remote syslog messages, though local syslog messages contain them. From the same box: 

tail -n1 /var/log/messages
Aug 31 21:17:18 router syslog.info syslogd exiting

22:57:25.324213 IP 192.168.XXX.XXX.50075 > 192.168.XXX.XXX.514: UDP, length 39
        0x0000:  4500 0043 0000 4000 4011 2ee0 c0a8 XXXX  E..C..@.@.....E.
        0x0010:  c0a8 XXXX c39b 0202 002f 7d76 3c31 333e  ..Ex...../}v<13>
        0x0020:  4175 6720 3331 2032 323a 3537 3a32 3520  Aug.31.22:57:25.
        0x0030:  726f 6f74 3a20 7465 7374 206d 6573 7361  root:.test.messa
        0x0040:  6765 0a                                  ge.

Compare that to a message sent by a Mac running syslogd with a remote destination:

22:59:42.770850 IP 192.168.XXX.XXX.59214 > 192.168.XXX.XXX.514: UDP, length 51
        0x0000:  4500 004f ebc7 0000 4011 827b c0a8 XXXX  E..O....@..{..E.
        0x0010:  c0a8 XXXX e74e 0202 003b b03e 3c31 333e  ..Ex.N...;.><13>
        0x0020:  4175 6720 3331 2032 323a 3539 3a33 3920  Aug.31.22:59:39.
        0x0030:  686f 7374 2e6c 6f63 616c 2075 7365 7231  host.local.user1
        0x0040:  315b 3334 3139 365d 3a20 7465 7374 0a    1[34196]:.test.

Also, my syslog startup: 

root@router:~# ps |grep sysl
 3999 root      1324 S    syslogd -R 192.168.69.120