Here's a link to discussion of the one line lost during TCP connection issue: http://marc.theaimsgroup.com/?l=syslog-ng&m=110742087620842&w=2 On Sat, 26 Mar 2005 23:33:41 -0800, UNIX Admin <infosec@gmail.com> wrote:
There is a known bug related to the first message getting dropped under certain circumstances. I think it is when a TCP connection is established though, is this consistent for you or only when the TCP connection is (re-)established?
On Sun, 27 Mar 2005 02:16:28 -0500, Jay Guerette <jayguerette@gmail.com> wrote:
I have a postfix server logging via syslog-ng. The log data is written to a local file and also sent via TCP to a central syslog-ng loghost.
On the source server (syslog-ng 1.6.6 on Linux) I see:
05:32:21 internal/smtpd[15534]: 9AE172D29A5: client=x.x.net[10.x.x.x] 05:32:21 internal/qmgr[9993]: 9AE172D29A5: from=<x@x.com>, size=1557811, nrcpt=1 (queue active)
On the central loghost (syslog-ng 1.6.5 on Linux) I see:
05:32:21 syslog-ng[28919]: AF_INET client connected from 10.x.x.x, port 33645
and
05:32:21 internal/qmgr[9993]: 9AE172D29A5: from=<x@x.com>, size=1557811, nrcpt=1 (queue active)
The 1st line from the source server is missing on the central loghost. Is this a bug? _______________________________________________ syslog-ng maillist - syslog-ng@lists.balabit.hu https://lists.balabit.hu/mailman/listinfo/syslog-ng Frequently asked questions at http://www.campin.net/syslog-ng/faq.html