NAME

       socklog - small and secure syslogd replacement for use with runit

SYNOPSIS

       socklog [-rRU] [unix] [path]
       socklog [-rR] inet [ip] [port]
       socklog [-rR] ucspi [args]

DESCRIPTION

       socklog  is  run  under  runit's  runsv(8),  writing syslog messages it receives from unix
       domain socket path or an inet udp socket ip:port through a pipe provided by runsv(8) to  a
       svlogd(8) process.

       socklog  can  be run as an ucspi application to listen to an unix domain stream socket and
       for more flexible distributed logging.

       If the environment variables $UID and/or $GID are present, socklog  drops  permissions  to
       those ids after creating and binding the socket (not in ucspi mode).

       socklog converts syslog facility and priority information to names (facility.priority:) as
       found in /usr/include/syslog.h at compile time if present.

       On solaris socklog also accepts sun_stream as first argument. Please see the web page  for
       details.

UNIX SOCKET

       socklog [ unix ] [ path ]

       Starting socklog with the 1st argument unix, socklog will listen to the unix domain socket
       path.  If path is omitted, the default /dev/log is used.

       The 1st argument may be omitted, default is unix.

INET SOCKET

       socklog inet [ ip ] [ port ]

       Starting socklog with the 1st argument inet, socklog will listen to the  inet  udp  socket
       ip:port.

       If ip starts with 0, socklog will bind to all local interfaces.

       If port is less or equal 1024, socklog must be run by root.

       port may be omitted, default is 514.  ip may be omitted, default is 0.

       socklog  prepends  a.b.c.d:  to  each  syslog message it receives, where a.b.c.d is the ip
       address of the connecting system.

UCSPI MODE

       socklog ucspi [ args ]

       Starting socklog with the 1st argument ucspi, socklog will run as  an  ucspi  application.
       Normally  socklog  will  only  be  started  in ucspi mode by an ucspi server tool, such as
       tcpsvd(8), tcpserver(1) or unixserver.

       For each arg, socklog will prepend $arg:  to  each  syslog  message,  if  the  environment
       variable $arg is present (maximum is 8).

OPTIONS

       -r     raw.  Write the raw syslog messages (no conversion of facility and priority) to the
              pipe, additionally to the log messages with syslog facility and priority  converted
              to names.

       -R     raw only.  Same as -r above, but write the raw syslog messages only.

       -U     respect  umask.   Don't  set  umask  to 0 before creating a unix domain socket, but
              respect the current setting of umask(2).  This option only  takes  effect  in  unix
              mode.

SEE ALSO

       sv(8),  runsvdir(8), runsv(8), svlogd(8), tryto(1), uncat(1), socklog-check(8), tcpsvd(8),
       nc(1)

        http://smarden.org/socklog/
        http://smarden.org/runit/

AUTHOR

       Gerrit Pape <pape@smarden.org>

                                                                                       socklog(8)