My Personal Web Site
For some time, there has been a new repository for rsyslog and associated programs on OBS. There will be packages for more distributions than on the current official packages. We will add modules not available on the rsyslog site, for example omhttp. The link to download rsyslog packages from OBS is: https://software.opensuse.org//download.html?project=home%3Argerhards&package=rsyslog One reason […]
Currently we are working on new rsyslog packages using the SUSE OBS tool. While this is still experimental, we have now published the first batch of packages. You can find them here. We have decided to first focus on Debian, since there are no other rsyslog official packages for this distribution. However, these are still […]
As I said in my last post, I was working on making rainerscript functions into loadable modules. This had multiple reasons. For one, adding new functions may add more and more dependencies, which in the end takes up a lot of memory on your computer, even if you don’t plan on using any of the […]
Right now i am working on making rsyslog script functions loadable instead of statically built in at compile time. Currently, them being built in is not a problem as they do not have many dependenies. But as more functions get added, the bulk of dependencies required for script functions grows. One recent example is the […]
Apart from the normal format for IPv6, it is also possible to format an IPv6 with an embedded IPv4 instead of the last two blocks. This is described in the RFC 4291 section 2.2.3, for example:::FFFF:129.144.52.38 The format is used for systems working with both IPv6 and IPv4 addresses. However, in the RFC it is […]
As I mentioned in my recent post about the mmanon rewrite, I have been working on an offline anonymization tool. It is called SLFA (short for simple log file anonymizer) and I have now finished the first usable version. SLFA is a java application that allows you to anonymize files from the command line. Currently, […]
I have recently finished the rewrite of the mmanon module. Now I have also finished implementing support for IPv6. This includes the same parameters as IPv4, but the mode parameter is now called anonmode, to make a later implementation of different output format modes for ipv6 easier. This might be in the future, but it […]
IPv6-addresses are represented by 128 bits. This makes it possible to provide far more addresses than IPv4. However, this also causes problems when working with IPv6. In this case, I am currently working on an IPv6-anonymiation function for rsyslog. There are some systems that support an unsigned 128 bit integer when using GCC or clang […]
I have completed the rewrite of the IPv4-function of the mmanon module.I have managed to keep the original parameters available, although the “rewrite” option is now called “zero”. This is not going to be a problem causing older, already running, configurations to no longer work, as the old parameter-names still work. However, having the “ipv4.” […]
Currently, rsyslog’s mmanon module has the task of anonymizing ip-addresses. However, due to only being able to anonymize ipv4-addresses, I decided to overhaul the module to be able to also work with ipv6-addresses (see this feature request). In doing this, I also noticed some bugs with the ipv4-module. Now there are two options: try to […]