We had a Disaster Recovery test recently where I specifically tested this exact scenario, as I couldn't be sure that syslog-ng wouldn't block to local Unix Domain connections. The routed link between the central syslog-ng host and the local syslog-ng client was dropped to see what effect it would have - for both syslog-ng and all other applications. The only effect seemed to be that the client machine created an error message every time_reopen() seconds detailing how many messages had been lost due to the broken connection. To slightly reduce the number of errors caused by error messages, I specifically adjusted the client machine's configuration to avoid it sending any messages generated by syslog-ng itself up to the remote host. Ted
-----Original Message----- From: syslog-ng-admin@lists.balabit.hu [mailto:syslog-ng-admin@lists.balabit.hu] On Behalf Of Philip Webster Sent: Monday May 17 2004 05:06 To: syslog-ng@lists.balabit.hu Subject: [syslog-ng]TCP Connection Dropouts
Hello,
I'm wondering about the resilience of syslog-ng to TCP connection dropouts. I've tested what happens when there is no connection available - syslog-ng buffers the output and continues to write to local files, ie. it doesn't block.
But what happens if the TCP connection fails halfway through? So, for example, the three-way handshake has been completed, but there is no response after the first data packet is sent because the remote host (or router, switch, ISP ...) has stopped responding. I can't really test this, so does anyone know how syslog-ng handles it?
Thanks Phil _______________________________________________ syslog-ng maillist - syslog-ng@lists.balabit.hu https://lists.balabit.hu/mailman/listinfo/syslog-ng Frequently asked questions at http://www.campin.net/syslog-ng/faq.html
************************************************************************************************ This E-mail message, including any attachments, is intended only for the person or entity to which it is addressed, and may contain confidential information. If you are not the intended recipient, any review, retransmission, disclosure, copying, modification or other use of this E-mail message or attachments is strictly forbidden. If you have received this E-mail message in error, please contact the author and delete the message and any attachments from your computer. You are also advised that the views and opinions expressed in this E-mail message and any attachments are the author's own, and may not reflect the views and opinions of FLEXTECH Television Limited. ************************************************************************************************