Date: Mon, 13 Dec 1999 22:23:53 +0100 From: Andre Albsmeier <andre.albsmeier@mchp.siemens.de> To: Dennis Boone <drb@msu.edu> Cc: freebsd-bugs@FreeBSD.ORG Subject: Re: bin/10553: syslogd suddenly stopped logging Message-ID: <19991213222353.A88868@internal> In-Reply-To: <199912131450.GAA82347@freefall.freebsd.org>; from drb@msu.edu on Mon, Dec 13, 1999 at 06:50:02AM -0800 References: <199912131450.GAA82347@freefall.freebsd.org>
next in thread | previous in thread | raw e-mail | index | archive | help
Hmm, don't know if it is related but I got a similar syslog problem:
Running syslogd on a machine M with two interfaces. Let interface 1
be named ifc1.my.domain.org and let interface 2 be named
ifc2.otherdomain.org. Normally, syslogd logs to a host L named
log.my.domain.org. All this traffic goes via a FreeBSD router R
with the interfaces named r1.my.domain.org and r2.my.domain.org.
M R L
------------- --------- -----
outer world ---|ifc2 ifc1|-----|r1 r2|-----|log|
------------- --------- -----
M logs directly to the syslogd on L. The packets go via R.
Everything is allright, tcpdump shows:
07:10:37.203164 ifc1.my.domain.org.syslog > log.my.domain.org.syslog: udp 36
07:10:43.420084 ifc1.my.domain.org.syslog > log.my.domain.org.syslog: udp 36
07:10:45.444710 ifc1.my.domain.org.syslog > log.my.domain.org.syslog: udp 65
Now, let's assume R is being rebooted and comes up again.
No more syslog messages make it through from M to L. Instead
tcpdump shows the following:
07:11:09.139434 ifc2.otherdomain.org.syslog > log.my.domain.org.syslog: udp 36
07:11:24.738422 ifc2.otherdomain.org.syslog > log.my.domain.org.syslog: udp 58
07:11:26.549774 ifc2.otherdomain.org.syslog > log.my.domain.org.syslog: udp 36
07:11:28.809938 ifc2.otherdomain.org.syslog > log.my.domain.org.syslog: udp 36
07:11:32.748879 ifc2.otherdomain.org.syslog > log.my.domain.org.syslog: udp 49
We see that packages now come from ifc2 and still want to
go to log.my.domain.org (as it was configured in syslogd.conf).
When syslogd is killed and restarted on M, everything works again...
All machines (H, R and L) are 3.4-RC machines. They work well for all
other stuff (M does www proxying, mail, ...).
To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-bugs" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?19991213222353.A88868>