
Research
Malicious npm Packages Impersonate Flashbots SDKs, Targeting Ethereum Wallet Credentials
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
syslog-udp-logger
Advanced tools
Syslog-ng TCP client for node, with basic fault-tolerance.
$ npm install syslog
var syslog = require('syslog-udp-logger');
var logger = syslog.createClient(514, 'localhost');
logger.info("ping!");
In increasing order of severity:
These are available as methods on Client, ex: logger.crit()
.
You may also call the log
method, and pass the level as the 2nd argument:
logger.log('fnord!', syslog.LOG_CRIT);
The default level is info
.
You will have to configure your syslog server to accept TCP connections.
This is usually done in /etc/syslog-ng.conf
. Let's say you have an app called fnord
,
the configuration would look something like this:
source tcp_s {
tcp(ip(0.0.0.0) port(514) max-connections(256));
};
destination fnord_d {
file("/var/log/fnord.log");
};
log { source(tcp_s); destination(fnord_d); };
If you have multiple apps which need to log via TCP, you can specify filters, as such:
filter fnord_f { program("fnord"); };
Then modify the log statement to read:
log { source(tcp_s); filter(fnord_f); destination(fnord_d); };
Now if you have another app, called bnord
, create similar destination
and filter
configurations for it,
and specify a new log statement, with the same source
:
log { source(tcp_s); filter(bnord_f); destination(bnord_d); };
For this to work, you have to make sure you set the process.title
variable in your node app.
process.title = 'fnord';
Alternatively, you can pass it as an option to createClient
:
syslog.createClient(514, 'localhost', { name: 'fnord' });
See LICENSE
file.
Copyright (c) 2011 Alexis Sellier
FAQs
Syslog UDP client, with basic fault-tolerance.
The npm package syslog-udp-logger receives a total of 4 weekly downloads. As such, syslog-udp-logger popularity was classified as not popular.
We found that syslog-udp-logger demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
Security News
Ruby maintainers from Bundler and rbenv teams are building rv to bring Python uv's speed and unified tooling approach to Ruby development.
Security News
Following last week’s supply chain attack, Nx published findings on the GitHub Actions exploit and moved npm publishing to Trusted Publishers.