Hey guys,<div>Are there any known bugs for syslog-ng v2.09 that won't allow a cisco router to send logs over tcp?</div><div>I can see a connection established in syslog-ng.</div><div>I also see the message come in via tcpdump, but nothing in syslog-ng's output.</div>
<div>If I change the router from tcp to udp, messages come in as expected.</div><div><br></div><div><b>Router config:</b></div><div><br></div><div>logging source-interface Loopback0 </div><div>logging <a style="BORDER-BOTTOM: 1px solid; COLOR: #0066cc; TEXT-DECORATION: none" title="" href="tricon:40,-1|172.18.224.150;majoshi@cisco.com" target="_self">172.18.224.150</a> </div>
<div>logging host <a style="BORDER-BOTTOM: 1px solid; COLOR: #0066cc; TEXT-DECORATION: none" title="" href="tricon:40,-1|172.18.224.190;majoshi@cisco.com" target="_self">172.18.224.190</a> transport tcp</div><div class="right">
<br></div><div class="right"><br></div><div><b>syslog-ng config:</b></div><div><br></div><div><div>source s_all {</div><div> udp();</div><div> tcp(ip(11.31.130.99) port(8002) max-connections(300));</div><div>
tcp(ip(172.18.224.190) port(601) max-connections(300));</div><div>};</div></div><div><br></div><div><br></div><div><b>debug output:</b></div><div>I commented out the line above for the other interface (11.31.130.99), restarted and this is all I see:</div>
<div>Syslog connection accepted; from='AF_INET<a style="BORDER-BOTTOM: 1px solid; COLOR: #0066cc; TEXT-DECORATION: none" title="" href="tricon:40,-1|(14.3.23.50;majoshi@cisco.com" target="_self">(14.3.23.50</a>:63845)', to='AF_INET<a style="BORDER-BOTTOM: 1px solid; COLOR: #0066cc; TEXT-DECORATION: none" title="" href="tricon:40,-1|(172.18.224.190;majoshi@cisco.com" target="_self">(172.18.224.190</a>:601)'<br>
</div><div><br></div><div><br></div><div><b>tcpdump:</b></div><div><br></div><div><div>14:13:46.914566 IP (tos 0x0, ttl 251, id 4303, offset 0, flags [none], proto TCP (6), length 134)</div><div> 14.3.23.50.63845 > xxx.com.601: Flags [.], seq 230:324, ack 1, win 4128, length 94</div>
<div><br></div><div><br></div><div><b>Router debug:</b></div><div><br></div><div>*Aug <a style="BORDER-BOTTOM: 1px solid; COLOR: #0066cc; TEXT-DECORATION: none" title="" href="tricon:40,-1|17 17;majoshi@cisco.com" target="_self">17
17</a>:34:19<a style="BORDER-BOTTOM: 1px solid; COLOR: #0066cc; TEXT-DECORATION: none" title="" href="tricon:40,-1|.772;majoshi@cisco.com" target="_self">.772</a>: %SYS<a style="BORDER-BOTTOM: 1px solid; COLOR: #0066cc; TEXT-DECORATION: none" title="" href="tricon:40,-1|-5-;majoshi@cisco.com" target="_self">-5-</a>CONFIG_I:
Configured from console by pnoc on vty<a style="BORDER-BOTTOM: 1px solid; COLOR: #0066cc; TEXT-DECORATION: none" title="" href="tricon:40,-1|0 (172.18.224.151);majoshi@cisco.com" target="_self">0
(172.18.224.151)</a> </div><div>*Aug <a style="BORDER-BOTTOM: 1px solid; COLOR: #0066cc; TEXT-DECORATION: none" title="" href="tricon:40,-1|17 17;majoshi@cisco.com" target="_self">17 17</a>:34:20<a style="BORDER-BOTTOM: 1px solid; COLOR: #0066cc; TEXT-DECORATION: none" title="" href="tricon:40,-1|.776;majoshi@cisco.com" target="_self">.776</a>: Released port
<a style="BORDER-BOTTOM: 1px solid; COLOR: #0066cc; TEXT-DECORATION: none" title="" href="tricon:40,-1|15205;majoshi@cisco.com" target="_self">15205</a> in
Transport Port Agent for TCP IP type 1 delay <a style="BORDER-BOTTOM: 1px solid; COLOR: #0066cc; TEXT-DECORATION: none" title="" href="tricon:40,-1|240000;majoshi@cisco.com" target="_self">240000</a> </div><div>*Aug <a style="BORDER-BOTTOM: 1px solid; COLOR: #0066cc; TEXT-DECORATION: none" title="" href="tricon:40,-1|17 17;majoshi@cisco.com" target="_self">17 17</a>:34:20<a style="BORDER-BOTTOM: 1px solid; COLOR: #0066cc; TEXT-DECORATION: none" title="" href="tricon:40,-1|.776;majoshi@cisco.com" target="_self">.776</a>: TCB 0x<a style="BORDER-BOTTOM: 1px solid; COLOR: #0066cc; TEXT-DECORATION: none" title="" href="tricon:40,-1|850;majoshi@cisco.com" target="_self">850</a>F<a style="BORDER-BOTTOM: 1px solid; COLOR: #0066cc; TEXT-DECORATION: none" title="" href="tricon:40,-1|9754;majoshi@cisco.com" target="_self">9754</a> destroyed </div>
<div>*Aug
<a style="BORDER-BOTTOM: 1px solid; COLOR: #0066cc; TEXT-DECORATION: none" title="" href="tricon:40,-1|17 17;majoshi@cisco.com" target="_self">17
17</a>:34:25<a style="BORDER-BOTTOM: 1px solid; COLOR: #0066cc; TEXT-DECORATION: none" title="" href="tricon:40,-1|.775;majoshi@cisco.com" target="_self">.775</a>: TCB<a style="BORDER-BOTTOM: 1px solid; COLOR: #0066cc; TEXT-DECORATION: none" title="" href="tricon:40,-1|83648;majoshi@cisco.com" target="_self">83648</a>E60 created </div>
<div>*Aug <a style="BORDER-BOTTOM: 1px solid; COLOR: #0066cc; TEXT-DECORATION: none" title="" href="tricon:40,-1|17 17;majoshi@cisco.com" target="_self">17
17</a>:34:25<a style="BORDER-BOTTOM: 1px solid; COLOR: #0066cc; TEXT-DECORATION: none" title="" href="tricon:40,-1|.775;majoshi@cisco.com" target="_self">.775</a>: TCB<a style="BORDER-BOTTOM: 1px solid; COLOR: #0066cc; TEXT-DECORATION: none" title="" href="tricon:40,-1|83648;majoshi@cisco.com" target="_self">83648</a>E60 setting
property TCP_PID <a style="BORDER-BOTTOM: 1px solid; COLOR: #0066cc; TEXT-DECORATION: none" title="" href="tricon:40,-1|(8) 845083;majoshi@cisco.com" target="_self">(8) 845083</a>E4</div><div>*Aug <a style="BORDER-BOTTOM: 1px solid; COLOR: #0066cc; TEXT-DECORATION: none" title="" href="tricon:40,-1|17 17;majoshi@cisco.com" target="_self">17
17</a>:34:25<a style="BORDER-BOTTOM: 1px solid; COLOR: #0066cc; TEXT-DECORATION: none" title="" href="tricon:40,-1|.775;majoshi@cisco.com" target="_self">.775</a>: TCB<a style="BORDER-BOTTOM: 1px solid; COLOR: #0066cc; TEXT-DECORATION: none" title="" href="tricon:40,-1|83648;majoshi@cisco.com" target="_self">83648</a>E60 setting
property TCP_NO_DELAY <a style="BORDER-BOTTOM: 1px solid; COLOR: #0066cc; TEXT-DECORATION: none" title="" href="tricon:40,-1|(1) 845083;majoshi@cisco.com" target="_self">(1) 845083</a>E8</div><div>*Aug <a style="BORDER-BOTTOM: 1px solid; COLOR: #0066cc; TEXT-DECORATION: none" title="" href="tricon:40,-1|17 17;majoshi@cisco.com" target="_self">17
17</a>:34:25<a style="BORDER-BOTTOM: 1px solid; COLOR: #0066cc; TEXT-DECORATION: none" title="" href="tricon:40,-1|.775;majoshi@cisco.com" target="_self">.775</a>: TCB<a style="BORDER-BOTTOM: 1px solid; COLOR: #0066cc; TEXT-DECORATION: none" title="" href="tricon:40,-1|83648;majoshi@cisco.com" target="_self">83648</a>E60 setting
property TCP keepalive timeout <a style="BORDER-BOTTOM: 1px solid; COLOR: #0066cc; TEXT-DECORATION: none" title="" href="tricon:40,-1|(17) 845084;majoshi@cisco.com" target="_self">(17) 845084</a>A0 </div><div>*Aug <a style="BORDER-BOTTOM: 1px solid; COLOR: #0066cc; TEXT-DECORATION: none" title="" href="tricon:40,-1|17 17;majoshi@cisco.com" target="_self">17
17</a>:34:25<a style="BORDER-BOTTOM: 1px solid; COLOR: #0066cc; TEXT-DECORATION: none" title="" href="tricon:40,-1|.775;majoshi@cisco.com" target="_self">.775</a>: TCP: Random
local port generated <a style="BORDER-BOTTOM: 1px solid; COLOR: #0066cc; TEXT-DECORATION: none" title="" href="tricon:40,-1|63845;majoshi@cisco.com" target="_self">63845</a>, network 1 </div><div>*Aug <a style="BORDER-BOTTOM: 1px solid; COLOR: #0066cc; TEXT-DECORATION: none" title="" href="tricon:40,-1|17 17;majoshi@cisco.com" target="_self">17
17</a>:34:25<a style="BORDER-BOTTOM: 1px solid; COLOR: #0066cc; TEXT-DECORATION: none" title="" href="tricon:40,-1|.775;majoshi@cisco.com" target="_self">.775</a>: TCB<a style="BORDER-BOTTOM: 1px solid; COLOR: #0066cc; TEXT-DECORATION: none" title="" href="tricon:40,-1|83648;majoshi@cisco.com" target="_self">83648</a>E60 bound to
<a style="BORDER-BOTTOM: 1px solid; COLOR: #0066cc; TEXT-DECORATION: none" title="" href="tricon:40,-1|14.3.23.50.63845;majoshi@cisco.com" target="_self">14.3.23.50.63845</a> </div><div>*Aug <a style="BORDER-BOTTOM: 1px solid; COLOR: #0066cc; TEXT-DECORATION: none" title="" href="tricon:40,-1|17 17;majoshi@cisco.com" target="_self">17 17</a>:34:25<a style="BORDER-BOTTOM: 1px solid; COLOR: #0066cc; TEXT-DECORATION: none" title="" href="tricon:40,-1|.775;majoshi@cisco.com" target="_self">.775</a>: Reserved port
<a style="BORDER-BOTTOM: 1px solid; COLOR: #0066cc; TEXT-DECORATION: none" title="" href="tricon:40,-1|63845;majoshi@cisco.com" target="_self">63845</a> in
Transport Port Agent for TCP IP type 1 </div><div>*Aug <a style="BORDER-BOTTOM: 1px solid; COLOR: #0066cc; TEXT-DECORATION: none" title="" href="tricon:40,-1|17 17;majoshi@cisco.com" target="_self">17 17</a>:34:25<a style="BORDER-BOTTOM: 1px solid; COLOR: #0066cc; TEXT-DECORATION: none" title="" href="tricon:40,-1|.775;majoshi@cisco.com" target="_self">.775</a>: TCP: sending
SYN, seq <a style="BORDER-BOTTOM: 1px solid; COLOR: #0066cc; TEXT-DECORATION: none" title="" href="tricon:40,-1|3300233565;majoshi@cisco.com" target="_self">3300233565</a>,
ack 0 </div><div>*Aug <a style="BORDER-BOTTOM: 1px solid; COLOR: #0066cc; TEXT-DECORATION: none" title="" href="tricon:40,-1|17 17;majoshi@cisco.com" target="_self">17 17</a>:34:25<a style="BORDER-BOTTOM: 1px solid; COLOR: #0066cc; TEXT-DECORATION: none" title="" href="tricon:40,-1|.775;majoshi@cisco.com" target="_self">.775</a>: TCP0:
Connection to <a style="BORDER-BOTTOM: 1px solid; COLOR: #0066cc; TEXT-DECORATION: none" title="" href="tricon:40,-1|172.18.224.190;majoshi@cisco.com" target="_self">172.18.224.190</a>:601, advertising MSS <a style="BORDER-BOTTOM: 1px solid; COLOR: #0066cc; TEXT-DECORATION: none" title="" href="tricon:40,-1|536;majoshi@cisco.com" target="_self">536</a> </div>
<div>*Aug <a style="BORDER-BOTTOM: 1px solid; COLOR: #0066cc; TEXT-DECORATION: none" title="" href="tricon:40,-1|17 17;majoshi@cisco.com" target="_self">17 17</a>:34:25<a style="BORDER-BOTTOM: 1px solid; COLOR: #0066cc; TEXT-DECORATION: none" title="" href="tricon:40,-1|.775;majoshi@cisco.com" target="_self">.775</a>: TCP0: state
was CLOSED -> SYNSENT [<a style="BORDER-BOTTOM: 1px solid; COLOR: #0066cc; TEXT-DECORATION: none" title="" href="tricon:40,-1|63845 -;majoshi@cisco.com" target="_self">63845 -</a>> <a style="BORDER-BOTTOM: 1px solid; COLOR: #0066cc; TEXT-DECORATION: none" title="" href="tricon:40,-1|172.18.224.190(601);majoshi@cisco.com" target="_self">172.18.224.190(601)</a>] </div>
<div>*Aug <a style="BORDER-BOTTOM: 1px solid; COLOR: #0066cc; TEXT-DECORATION: none" title="" href="tricon:40,-1|17 17;majoshi@cisco.com" target="_self">17 17</a>:34:25<a style="BORDER-BOTTOM: 1px solid; COLOR: #0066cc; TEXT-DECORATION: none" title="" href="tricon:40,-1|.779;majoshi@cisco.com" target="_self">.779</a>: TCP0: state
was SYNSENT -> ESTAB [<a style="BORDER-BOTTOM: 1px solid; COLOR: #0066cc; TEXT-DECORATION: none" title="" href="tricon:40,-1|63845 -;majoshi@cisco.com" target="_self">63845 -</a>> <a style="BORDER-BOTTOM: 1px solid; COLOR: #0066cc; TEXT-DECORATION: none" title="" href="tricon:40,-1|172.18.224.190(601);majoshi@cisco.com" target="_self">172.18.224.190(601)</a>] </div>
<div>*Aug <a style="BORDER-BOTTOM: 1px solid; COLOR: #0066cc; TEXT-DECORATION: none" title="" href="tricon:40,-1|17 17;majoshi@cisco.com" target="_self">17 17</a>:34:25<a style="BORDER-BOTTOM: 1px solid; COLOR: #0066cc; TEXT-DECORATION: none" title="" href="tricon:40,-1|.779;majoshi@cisco.com" target="_self">.779</a>: TCP: tcb <a style="BORDER-BOTTOM: 1px solid; COLOR: #0066cc; TEXT-DECORATION: none" title="" href="tricon:40,-1|83648;majoshi@cisco.com" target="_self">83648</a>E60 connection
to <a style="BORDER-BOTTOM: 1px solid; COLOR: #0066cc; TEXT-DECORATION: none" title="" href="tricon:40,-1|172.18.224.190;majoshi@cisco.com" target="_self">172.18.224.190</a>:601, peer MSS <a style="BORDER-BOTTOM: 1px solid; COLOR: #0066cc; TEXT-DECORATION: none" title="" href="tricon:40,-1|1460;majoshi@cisco.com" target="_self">1460</a>, MSS is <a style="BORDER-BOTTOM: 1px solid; COLOR: #0066cc; TEXT-DECORATION: none" title="" href="tricon:40,-1|536;majoshi@cisco.com" target="_self">536</a> </div>
<div>*Aug <a style="BORDER-BOTTOM: 1px solid; COLOR: #0066cc; TEXT-DECORATION: none" title="" href="tricon:40,-1|17 17;majoshi@cisco.com" target="_self">17 17</a>:34:25<a style="BORDER-BOTTOM: 1px solid; COLOR: #0066cc; TEXT-DECORATION: none" title="" href="tricon:40,-1|.779;majoshi@cisco.com" target="_self">.779</a>: TCB<a style="BORDER-BOTTOM: 1px solid; COLOR: #0066cc; TEXT-DECORATION: none" title="" href="tricon:40,-1|83648;majoshi@cisco.com" target="_self">83648</a>E60 connected
to <a style="BORDER-BOTTOM: 1px solid; COLOR: #0066cc; TEXT-DECORATION: none" title="" href="tricon:40,-1|172.18.224.190.601;majoshi@cisco.com" target="_self">172.18.224.190.601</a> </div><div>*Aug <a style="BORDER-BOTTOM: 1px solid; COLOR: #0066cc; TEXT-DECORATION: none" title="" href="tricon:40,-1|17 17;majoshi@cisco.com" target="_self">17 17</a>:34:25<a style="BORDER-BOTTOM: 1px solid; COLOR: #0066cc; TEXT-DECORATION: none" title="" href="tricon:40,-1|.779;majoshi@cisco.com" target="_self">.779</a>: %SYS<a style="BORDER-BOTTOM: 1px solid; COLOR: #0066cc; TEXT-DECORATION: none" title="" href="tricon:40,-1|-6-;majoshi@cisco.com" target="_self">-6-</a>LOGGINGHOST_STARTSTOP: Logging to host <a style="BORDER-BOTTOM: 1px solid; COLOR: #0066cc; TEXT-DECORATION: none" title="" href="tricon:40,-1|172.18.224.190;majoshi@cisco.com" target="_self">172.18.224.190</a> port <a style="BORDER-BOTTOM: 1px solid; COLOR: #0066cc; TEXT-DECORATION: none" title="" href="tricon:40,-1|601;majoshi@cisco.com" target="_self">601</a> started -
reconnection<br></div><div><br></div>______________________________________________________________ <br><br>Clayton Dukes<br>______________________________________________________________<br>
</div>