viewvc.cgi/sysplogd/sysplogd

#!/usr/bin/perl

use warnings;
use strict;

use IO::Socket;
use Data::Dump qw/dump/;
#use StoreToMongoDB;

my $port = 514;

my $MAXLEN = 1524;

my @facilities = ( qw/
kernel user mail system security internal printer news uucp clock security2 
FTP NTP audit alert clock2 local0 local1 local2 local3 local4 local5 local6 local7
/ );

# Start Listening on UDP port 514
my $sock = IO::Socket::INET->new(
        LocalPort => $port,
        Proto => 'udp'
#       ReuseAddr => 1,
) || die "can't listen to $port: $!";

print "INFO: listen on $port",$/;

my $rin = '';
my $buf;
while(1) {
        $sock->recv($buf, $MAXLEN);
        my ($port, $ipaddr) = sockaddr_in($sock->peername);
        my $hostname = gethostbyaddr($ipaddr, AF_INET);
        my $ip = join('.', unpack('C4',$ipaddr));
        warn "# ",dump( $port, $ipaddr, $hostname, $buf );

        if ( $buf=~/<(\d+)>(.*?):(.*)/ ) {
                my $sev=$1 % 8;
                my $fac=($1-$sev) / 8;

                my $log = {
                        ip => $ip,
                        port => $port,
                        hostname => $hostname,

                        priority => $1,
                        severity => $sev,
                        facility => $fac,
                        header => $2,
                        message => $3,
                };
                print dump( $log ),$/;
                #StoreToMongoDB->insert( $log );
        }
}
1	dpavlin	1	#!/usr/bin/perl
2
3			use warnings;
4			use strict;
5
6			use IO::Socket;
7			use Data::Dump qw/dump/;
8	dpavlin	2	#use StoreToMongoDB;
9	dpavlin	1
10			my $port = 514;
11
12			my $MAXLEN = 1524;
13
14			my @facilities = ( qw/
15			kernel user mail system security internal printer news uucp clock security2
16			FTP NTP audit alert clock2 local0 local1 local2 local3 local4 local5 local6 local7
17			/ );
18
19			# Start Listening on UDP port 514
20			my $sock = IO::Socket::INET->new(
21			LocalPort => $port,
22			Proto => 'udp'
23			# ReuseAddr => 1,
24			) \|\| die "can't listen to $port: $!";
25
26			print "INFO: listen on $port",$/;
27
28			my $rin = '';
29			my $buf;
30			while(1) {
31			$sock->recv($buf, $MAXLEN);
32			my ($port, $ipaddr) = sockaddr_in($sock->peername);
33			my $hostname = gethostbyaddr($ipaddr, AF_INET);
34			my $ip = join('.', unpack('C4',$ipaddr));
35			warn "# ",dump( $port, $ipaddr, $hostname, $buf );
36	dpavlin	2
37	dpavlin	1	if ( $buf=~/<(\d+)>(.?):(.)/ ) {
38	dpavlin	2	my $sev=$1 % 8;
39			my $fac=($1-$sev) / 8;
40
41			my $log = {
42			ip => $ip,
43			port => $port,
44			hostname => $hostname,
45
46			priority => $1,
47			severity => $sev,
48			facility => $fac,
49			header => $2,
50			message => $3,
51			};
52			print dump( $log ),$/;
53			#StoreToMongoDB->insert( $log );
54	dpavlin	1	}
55			}