Date: Thu, 1 Nov 2001 22:50:04 -0800 (PST) From: "Crist J. Clark" <cristjc@earthlink.net> To: freebsd-bugs@FreeBSD.org Subject: Re: bin/31657: syslogd stop processing remote host log after a while Message-ID: <200111020650.fA26o4n72373@freefall.freebsd.org>
next in thread | raw e-mail | index | archive | help
The following reply was made to PR bin/31657; it has been noted by GNATS.
From: "Crist J. Clark" <cristjc@earthlink.net>
To: Romain Griffiths <wid@epita.fr>
Cc: freebsd-gnats-submit@FreeBSD.ORG
Subject: Re: bin/31657: syslogd stop processing remote host log after a while
Date: Thu, 1 Nov 2001 22:37:39 -0800
On Wed, Oct 31, 2001 at 02:34:58AM -0800, Romain Griffiths wrote:
[snip]
> >Description:
> I have a loghost that log syslog message from 2 servers.
> After a while (from few minutes to several hours) the syslogd on my loghost stop logging messages.
> tcpdump show that servers still send syslog info to the loghost:
> 11:27:19.111707 ide.syslog > loghost.syslog: udp 102
> but nothing arrive to
> -rw-r--r-- 1 root wheel 18357 Oct 31 10:42 any.log
>
> I have a bad-quality hub to link these machines.
>
> >How-To-Repeat:
> on loghost (10.0.0.10):
> in rc.conf:
> syslogd_flags="-4 -n -a 10.0.0.2 -a 10.0.0.1"
> in syslog.conf:
>
> +10.0.0.1
> *.*;security.none /space1/log/ide/any.log
> security.* /space1/log/ide/security.log
>
> +10.0.0.2
> *.*;mail.none /space1/log/mail/any.log
> mail.* /space1/log/mail/mail.log
>
> on 10.0.0.1 syslog.conf:
> *.* @10.0.0.10
> on 10.0.0.2 syslog.conf:
> *.* @10.0.0.10
This is more of something for freebsd-questions.
Can you run syslogd(8) in debug mode (the '-d' option) on the
server. See if it is receiving those incoming messages at all.
On a lossy network, there is a chance that the machines sending out
syslog messages might stop, and not start again, if they think the
remote server is unreachable. But you would not see the network
traffic in that case.
--
Crist J. Clark | cjclark@alum.mit.edu
| cjclark@jhu.edu
http://people.freebsd.org/~cjc/ | cjc@freebsd.org
To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-bugs" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200111020650.fA26o4n72373>