syslog.pl

#!/usr/bin/perl
use IO::Socket;
use Time::Local;
use POSIX;

my $buf;
my $Filename, $RotateTime = 0;
my $DEBUG = 0;

$LOGSTAGING="/var/DAD/Logs/LogStaging";
$LOGPROCESSING="/var/DAD/Logs/LogsToProcess";

$sock = IO::Socket::INET->new(LocalPort => '514', Proto => 'udp')||die("Socket: $@");

do{
	$sock->recv($buf, 1540);
	my ($port, $ipaddr) = sockaddr_in($sock->peername);
	@dq = unpack("C4", $ipaddr);
	$address = join(".", @dq);
	$buf =~ s/^<[0-9]+>//;
	logit($address, $buf);
}while(1);

sub logit{
	my $host = shift;
	my $message = shift;
	&RotateLog;
	chomp($message);
	print LOG "$host $message\n";
	if($DEBUG) { print "$host $message\n" }
}

sub RotateLog
{
	if(mktime(localtime()) > $RotateTime)
	{
		if($RotateTime > 0)
		{
			close(LOG);
			rename "$LOGSTAGING/$Filename", "$LOGPROCESSING/$Filename";
		}
		$RotateTime = mktime(localtime());
		$Filename = "syslog.$RotateTime";
		open(LOG, ">$LOGSTAGING/$Filename");
		$RotateTime += 60;
	}
}