Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 11 Nov 2016 19:22:14 +0000
From:      bugzilla-noreply@freebsd.org
To:        freebsd-ports-bugs@FreeBSD.org
Subject:   [Bug 214428] sysutils/rsyslog8: UDP input is lost in 8.21.0
Message-ID:  <bug-214428-13@https.bugs.freebsd.org/bugzilla/>

next in thread | raw e-mail | index | archive | help
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D214428

            Bug ID: 214428
           Summary: sysutils/rsyslog8: UDP input is lost in 8.21.0
           Product: Ports & Packages
           Version: Latest
          Hardware: Any
                OS: Any
            Status: New
          Severity: Affects Only Me
          Priority: ---
         Component: Individual Port(s)
          Assignee: matthew@FreeBSD.org
          Reporter: dch@skunkwerks.at
             Flags: maintainer-feedback?(matthew@FreeBSD.org)
          Assignee: matthew@FreeBSD.org

# test run

while true; do sleep 2; logger -4 -h 127.0.0.1 testing1 ; done &
/usr/local/sbin/rsyslogd  -i /var/run/syslog.pid -f /usr/local/etc/rsyslog.=
conf
-dn 2>&1| grep -i udp
sockstat -46l |grep 514
root     rsyslogd   6737  4  tcp4   127.0.0.1:514         *:*
root     rsyslogd   6737  6  udp4   127.0.0.1:514         *:*

# expected results

rsyslog is clearly listening on the right port, so we should see rsyslog
receiving messages on udp transport, along the lines of this (done directly=
 via
/dev/log socket with logger)

# 0689.354882820:main Q:Reg/w0  : processBATCH: next msg 0: <13>Nov 11 18:5=
8:09
dch: testing3
0689.837419435:main Q:Reg/w0  : frame to send: '2 syslog 58
<13>2016-11-11T18:58:09.354059+00:00 bridget dch: testing3

# actual results

nothing. we can see via tcpdump that the packets are indeed sent, and every=
 2
seconds this occurs:

8412.256941479:imudp.c        : imudp: recvmmsg returned 1
8412.257276361:imudp.c        : imudp: recvmmsg returned -1


8411.958888001:main thread    : module config name is 'imudp'
8411.958892543:main thread    : module imudp supports rsyslog v6 config
interface
8411.958902654:main thread    : module (global) param blk for imudp:
8411.975968672:main thread    :         name: 'type', value 'imudp'
8411.975984127:main thread    : type:  'imudp'
8411.975994027:main thread    : newInpInst (imudp)
8411.976021430:main thread    : input param blk in imudp:
8411.978908319:main thread    : beginCnfLoad(0x802a1b260) for module 'imudp'
8411.978913360:main thread    : calling endCnfLoad() for module 'imudp'
8411.979041683:main thread    : module imudp tells us config can be activat=
ed
8411.981436622:main thread    : Template:
Name=3D'RSYSLOG_omudpspoofDfltSourceTpl'
8411.981604979:main thread    :     imudp
8411.982171343:main thread    : pre priv drop activating config 0x801e4c000=
 for
module imudp
8411.982179294:main thread    : Trying to open syslog UDP ports at
127.0.0.1:514.
8411.982218865:main thread    : ratelimit:imudp(127.0.0.1:514):new
ratelimiter:bReduceRepeatMsgs 0
8411.982639625:main thread    : activating config 0x801e4c000 for module im=
udp
8411.982646685:main thread    : imudp: config params iMaxLine 65536, lenRcv=
Buf
2097184
8411.982757035:main thread    : Allowed UDP Senders:
8411.984124456:main thread    : running module imudp with config 0x801e7828=
0,
term mode: cooperative/SIGTTIN
8411.985111180:imudp.c        : imudp uses select()
8411.985134341:imudp.c        : Listening on UDP syslogd socket 6 (IPv4/port
514).
8411.985141475:imudp.c        : --------imUDP calling select, active file
descriptors (max 6): 6
8412.256941479:imudp.c        : imudp: recvmmsg returned 1
8412.257276361:imudp.c        : imudp: recvmmsg returned -1
8412.257291132:imudp.c        : Listening on UDP syslogd socket 6 (IPv4/port
514).
8412.257295315:imudp.c        : --------imUDP calling select, active file
descriptors (max 6): 6
8414.385974230:imudp.c        : imudp: recvmmsg returned 1
8414.385998870:imudp.c        : imudp: recvmmsg returned -1
8414.386008621:imudp.c        : Listening on UDP syslogd socket 6 (IPv4/port
514).
8414.386012513:imudp.c        : --------imUDP calling select, active file
descriptors (max 6): 6
8416.409035530:imudp.c        : imudp: recvmmsg returned 1


# uname -r
11.0-RELEASE-p2

# pkg info rsyslog
rsyslog-8.21.0
Name           : rsyslog
Version        : 8.21.0
Installed on   : Wed Oct  5 21:27:05 2016 UTC
Origin         : sysutils/rsyslog8
Architecture   : freebsd:11:x86:64
Prefix         : /usr/local
Categories     : sysutils
Licenses       : LGPL3 and GPLv3 and APACHE20
Maintainer     : matthew@FreeBSD.org
WWW            : http://www.rsyslog.com/
Comment        : Syslogd supporting SQL, TCP, and TLS
Options        :
        DBI            : off
        DOCS           : on
        GCRYPT         : on
        GNUTLS         : off
        GSSAPI         : off
        MYSQL          : off
        NORMALIZE      : off
        PGSQL          : off
        RELP           : on
        SNMP           : off
Shared Libs required:
        librelp.so.0
        liblogging-rfc3195.so.0
        libfastjson.so.4
        liblogging-stdlog.so.0
        libgpg-error.so.0
        libestr.so.0
        libuuid.so.1
        libgcrypt.so.20


# /usr/local/etc/rsyslog.conf
# Load Modules
module(load=3D"imtcp")
module(load=3D"imklog")
module(load=3D"imudp")
module(load=3D"imrelp")
module(load=3D"omrelp")
module(load=3D"imuxsock")
module(load=3D"immark")
module(load=3D"impstats")

# Disk Queues
# zfs create -o canmount=3Doff zroot/var/spool
# zfs create zroot/var/spool/rsyslog
# mkdir -m0700 /var/log/rsyslog
$WorkDirectory /var/spool/rsyslog
$MaxMessageSize 64k
$MainMsgQueueFileName mainq
$MainMsgQueueType LinkedList
$MainMsgQueueSaveOnShutDown on
$MainMsgQueueMaxDiskSpace 10g
$MainMsgQueueSize 10000000
$ActionSendResendLastMsgOnReconnect on

input(type=3D"imtcp"
    address=3D"127.0.0.1"
    port=3D"514")
input(type=3D"imudp"
    address=3D"127.0.0.1"
    port=3D"514")
action(type=3D"omrelp"
    target=3D"127.0.0.1"
    port=3D"44514"
)


This looks awfully like
https://patch-diff.githubusercontent.com/raw/rsyslog/rsyslog/pull/1147.patch
If the new 8.23.0 will be released on 2016/11/15 (viz
https://github.com/rsyslog/rsyslog/blob/master/ChangeLog ) then we might as
well just bump the version.

I'll test locally Matthew's patch and report back if it addressed this.

--=20
You are receiving this mail because:
You are the assignee for the bug.=



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?bug-214428-13>