/usr/include/syslog-ng/msg-format.h is in syslog-ng-dev 3.8.1-10.
This file is owned by root:root, with mode 0o644.
The actual contents of the file can be viewed below.
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 | /*
* Copyright (c) 2002-2012 Balabit
* Copyright (c) 1998-2012 Balázs Scheidler
*
* This library is free software; you can redistribute it and/or
* modify it under the terms of the GNU Lesser General Public
* License as published by the Free Software Foundation; either
* version 2.1 of the License, or (at your option) any later version.
*
* This library is distributed in the hope that it will be useful,
* but WITHOUT ANY WARRANTY; without even the implied warranty of
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
* Lesser General Public License for more details.
*
* You should have received a copy of the GNU Lesser General Public
* License along with this library; if not, write to the Free Software
* Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA
*
* As an additional exemption you are allowed to compile & link against the
* OpenSSL libraries as published by the OpenSSL project. See the file
* COPYING for details.
*
*/
#ifndef MSG_FORMAT_H_INCLUDED
#define MSG_FORMAT_H_INCLUDED
#include "syslog-ng.h"
#include "timeutils.h"
#include "logproto/logproto-server.h"
#include <regex.h>
enum
{
/* don't parse the message, put everything into $MSG */
LP_NOPARSE = 0x0001,
/* check if the hostname contains valid characters and assume it is part of the program field if it isn't */
LP_CHECK_HOSTNAME = 0x0002,
/* message is using RFC5424 format */
LP_SYSLOG_PROTOCOL = 0x0004,
/* the caller knows the message is valid UTF-8 */
LP_ASSUME_UTF8 = 0x0008,
/* validate that all characters are indeed UTF-8 and mark the message as valid when relaying */
LP_VALIDATE_UTF8 = 0x0010,
/* sanitize input and force it to be valid UTF-8 by escaping */
LP_SANITIZE_UTF8 = 0x0020,
/* the message may not contain NL characters, strip them if it does */
LP_NO_MULTI_LINE = 0x0040,
/* don't store MSGHDR in the LEGACY_MSGHDR macro */
LP_STORE_LEGACY_MSGHDR = 0x0080,
/* expect a hostname field in the message */
LP_EXPECT_HOSTNAME = 0x0100,
/* message is locally generated and should be marked with LF_LOCAL */
LP_LOCAL = 0x0200,
};
typedef struct _MsgFormatHandler MsgFormatHandler;
typedef struct _MsgFormatOptions
{
gboolean initialized;
gchar *format;
MsgFormatHandler *format_handler;
guint32 flags;
guint16 default_pri;
gchar *recv_time_zone;
TimeZoneInfo *recv_time_zone_info;
regex_t *bad_hostname;
gint sdata_param_value_max;
} MsgFormatOptions;
struct _MsgFormatHandler
{
/* this method has a chance to change the LogProto related options to
* match the requirements of the "format" in question. This is used by
* the "pacct" plugin to set the record length the proper size
*/
LogProtoServer *(*construct_proto)(const MsgFormatOptions *options, LogTransport *transport, const LogProtoServerOptions *proto_options);
void (*parse)(const MsgFormatOptions *options, const guchar *data, gsize length, LogMessage *msg);
};
void msg_format_options_defaults(MsgFormatOptions *options);
void msg_format_options_init(MsgFormatOptions *parse_options, GlobalConfig *cfg);
void msg_format_options_destroy(MsgFormatOptions *parse_options);
gboolean msg_format_options_process_flag(MsgFormatOptions *options, gchar *flag);
void msg_format_inject_parse_error(LogMessage *msg, const guchar *data, gsize length);
#endif
|