We need to know a lot more to be able to troubleshoot that. What is your setup, what box is this occuring on, how many hosts connect to it, etc.

That message simply means that the remote end of a connection closed it. Could be the connection was idle and it was terminated, or the syslog on the other end shut down, or theres some firewall in between that killed it, etc.

Sent: Friday, July 30, 2010 10:18:17 AM
From: Pedro Rafael Alves Simoes <pedro.a.simoes@gmail.com>
To: syslog-ng@lists.balabit.hu
Subject: [syslog-ng] Syslog IO Error 
Hello,

My Syslog-ng shows this error message:

I/O error occurred while reading; fd='183', error='Connection reset by
peer (104)'

Anybody have a clue in how to resolve this? I've tried a google search
about this but didn't get much information...

Using RedHat Linux 2.6.18-164.el5
syslog-ng-2.1.4-1.el5

Thanks.
______________________________________________________________________________
Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng
Documentation: http://www.balabit.com/support/documentation/?product=syslog-ng
FAQ: http://www.campin.net/syslog-ng/faq.html