From owner-freebsd-bugs Thu Nov 1 22:50: 7 2001 Delivered-To: freebsd-bugs@hub.freebsd.org Received: from freefall.freebsd.org (freefall.FreeBSD.org [216.136.204.21]) by hub.freebsd.org (Postfix) with ESMTP id 4380C37B401 for ; Thu, 1 Nov 2001 22:50:04 -0800 (PST) Received: (from gnats@localhost) by freefall.freebsd.org (8.11.4/8.11.4) id fA26o4n72373; Thu, 1 Nov 2001 22:50:04 -0800 (PST) (envelope-from gnats) Date: Thu, 1 Nov 2001 22:50:04 -0800 (PST) Message-Id: <200111020650.fA26o4n72373@freefall.freebsd.org> To: freebsd-bugs@FreeBSD.org Cc: From: "Crist J. Clark" Subject: Re: bin/31657: syslogd stop processing remote host log after a while Reply-To: "Crist J. Clark" Sender: owner-freebsd-bugs@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org The following reply was made to PR bin/31657; it has been noted by GNATS. From: "Crist J. Clark" To: Romain Griffiths Cc: freebsd-gnats-submit@FreeBSD.ORG Subject: Re: bin/31657: syslogd stop processing remote host log after a while Date: Thu, 1 Nov 2001 22:37:39 -0800 On Wed, Oct 31, 2001 at 02:34:58AM -0800, Romain Griffiths wrote: [snip] > >Description: > I have a loghost that log syslog message from 2 servers. > After a while (from few minutes to several hours) the syslogd on my loghost stop logging messages. > tcpdump show that servers still send syslog info to the loghost: > 11:27:19.111707 ide.syslog > loghost.syslog: udp 102 > but nothing arrive to > -rw-r--r-- 1 root wheel 18357 Oct 31 10:42 any.log > > I have a bad-quality hub to link these machines. > > >How-To-Repeat: > on loghost (10.0.0.10): > in rc.conf: > syslogd_flags="-4 -n -a 10.0.0.2 -a 10.0.0.1" > in syslog.conf: > > +10.0.0.1 > *.*;security.none /space1/log/ide/any.log > security.* /space1/log/ide/security.log > > +10.0.0.2 > *.*;mail.none /space1/log/mail/any.log > mail.* /space1/log/mail/mail.log > > on 10.0.0.1 syslog.conf: > *.* @10.0.0.10 > on 10.0.0.2 syslog.conf: > *.* @10.0.0.10 This is more of something for freebsd-questions. Can you run syslogd(8) in debug mode (the '-d' option) on the server. See if it is receiving those incoming messages at all. On a lossy network, there is a chance that the machines sending out syslog messages might stop, and not start again, if they think the remote server is unreachable. But you would not see the network traffic in that case. -- Crist J. Clark | cjclark@alum.mit.edu | cjclark@jhu.edu http://people.freebsd.org/~cjc/ | cjc@freebsd.org To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-bugs" in the body of the message