Re: socklog problem...

["George Georgalis" <george@galis.org>]

On Tue, May 30, 2006 at 09:59:54PM -0400, George Georgalis wrote:
>
>Is this happening because it is in a FreeBSD jail?
>I tried/failed to disable the ucspi test.
>
>Since I don't plan to listen on network for logs...
>is there a good way to not compile/test that function?
>or am I completely off base?

oops, I was thinking "inet" -- need ucspi pretty badly.

how can I grep out the cause of the error...

( echo foo; echo bar; echo baz ) |env u=U socklog ucspi u

that line from ./src/socklog.check is is the last one (I can see) before the fail...
and it works on command line...

( echo foo; echo bar; echo baz ) |env u=U ./command/socklog ucspi u ; echo $?
U: foo
U: bar
U: baz
0

Humm, well it seems ./check-local is failing on the socklog portion...

root@jail3:/package/admin/socklog-2.1.0/compile/ env PATH=$PATH:../command/ ./check-local socklog-check socklog-conf tryto uncat socklog
Checking socklog-check...
Checking socklog-conf...
Checking tryto...
Checking uncat...
Checking socklog...
listening on socklog.check.socket, starting.
foo
0
listening on 127.0.0.1:12614, starting.
62.123.150.205: foo
0
U: foo
U: bar
U: baz
0
socklog failed.


root@jail3:/package/admin/socklog-2.1.0/compile/ cat ./check-local
#!/bin/sh

PATH=`pwd`:$PATH
for i in ${1+"$@"}; do
  echo "Checking $i..."
  env - PATH="$PATH" ctmp="`pwd`/check-tmp" $i.check 2>&1 |cat -v >$i.local
  ./check-diff $i || ( cat $i.local; echo "$i failed."; exit 1 ) || exit 1
done


root@jail3:/package/admin/socklog-2.1.0/ cat compile/check-diff
#!/bin/sh
test -r "$1".dist || exit 1
test -r "$1".local || exit 1
while read i; do
  read j 0<&7 || exit 1
  test "$i" = "$j" || exit 1
done 7<"$1".dist <"$1".local


Aha Ha! here's the fix... for me.

--- compile/socklog.dist.orig      Wed May 31 03:07:06 2006
+++ compile/socklog.dist        Wed May 31 03:07:38 2006
@@ -2,7 +2,7 @@
 foo
 0
 listening on 127.0.0.1:12614, starting.
-127.0.0.1: foo
+62.123.150.205: foo
 0
 U: foo
 U: bar


seems somehow we need a test for when run on a jail with an ip
address, but no 127/8 available.

// George



-- 
George Georgalis, systems architect, administrator <IXOYE><
http://galis.org/ cell:646-331-2027 mailto:george@galis.org