sysklogd v2.7.0

Caution

This release implicitly changes the behavior of forwarded messages. By default, all outbound messages (each has only one syslog line) to remote syslog servers are now capped to 1024 bytes total.

See the full log of changes below and the documentation, the program manual pages, for more information.

Changes

• syslogd by default now cap forwarded messages to 1024 bytes. This can be adjusted using -M size or the config file setting udp_size. See the documentation for more information and reasoning behind this
• syslogd socket buffering has been reduced from 160 kiB to 80 kiB
• Allow slashes in process names to support, e.g., postfix/qmgr
• Support for extended message filtering based on tag/ident, hostname, or message property. This allows sorting of messages based on their origin (program/remote) or content in any of the available message fields: exact match, case-insensitive substring matching or extended regular expression
• Support for remote logging to a multicast group, as well as acting as a multicast group receiver of syslog messages, both IPv4 and IPv6. Forwarding to multicast groups support two new, per action, options:
  • iface=IFNAME to set a different outbound interface
  • ttl=1.255 to adjust the TTL of outbound multicast (default: 1)
• Client support for controlling egressing multicast, two new members in struct syslog_data: .log_iface and .log_ttl in libsyslog.a, for details, see above
• Bump libsyslog.a ABI version: 0.1.0 -> 0.2.0
• logger support for controlling egressing multicast using a new command line option, -o iface=IFNAME,ttl=<1..255>

Fixes

• syslogd now logs the hostname as the FQDN in RFC5424 output format
• Fix #90 (reopened): parsing of IPv6 addresses in listen .conf file directive, as well as the command line option -b, is broken. The format -b [A:B:C:D]:PORT is now correctly parsed