[prev in list] [next in list] [prev in thread] [next in thread] 

List:       syslog-ng
Subject:    Re: [syslog-ng] I/O errors
From:       Russell Fulton <r.fulton () auckland ! ac ! nz>
Date:       2013-06-17 20:18:30
Message-ID: E1E7B358-CC2E-432B-9D15-8E6A1DA85D21 () auckland ! ac ! nz
[Download RAW message or body]


On 18/06/2013, at 8:07 AM, Russell Fulton <r.fulton@auckland.ac.nz> wrote:

> 
> On 17/06/2013, at 11:44 PM, Balazs Scheidler <bazsi77@gmail.com> wrote:
> 
> > the peer has terminated the connection in which case syslog-ng automatically \
> > reconnects. these lines should contain more information :( 
> > anyway, you can find out what happens by tcpdumping the network interface and \
> > looking for RST packets. 
> 
> Thanks Bazsi!  will do.  The only connection is to another machine also running \
> syslog-ng.  Any hints on what might cause it to reset the connection.  There is not \
> a huge load being forwarded — order of tens of logs/sec. 

Oh, I see. These are incoming connection not outgoing ones!  That makes more sense.  \
I had not realised that that many of our boxes were using tcp to send stuff to our \
loghost.

Now I have a handle on this I will follow it up.

R

______________________________________________________________________________
Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng
Documentation: http://www.balabit.com/support/documentation/?product=syslog-ng
FAQ: http://www.balabit.com/wiki/syslog-ng-faq


[prev in list] [next in list] [prev in thread] [next in thread]