Error accepting AF_UNIX connection, opened connections: 100, max: 100
I'm getting the following on a host that is sending logs to a remote central logserver: syslog-ng[2390]: Error accepting AF_UNIX connection, opened connections: 100, max: 100 Why is this happening? It isn't accepting logs, it's only sending them. And I also increased the remote logserver's max to 100 with the following line source s_tcp { tcp( port(<someport>) max-connections(1000)); }; For a start, I don't have 100 hosts logging to the remote logserver. Second, this host isn't the logserver so it shouldn't have this in it's /var/log/messages!!!! Can anyone explain this strange behavior? Thanks -h -- Hari Sekhon
On Wed, 2006-10-18 at 13:43 +0100, Hari Sekhon wrote:
I'm getting the following on a host that is sending logs to a remote central logserver:
syslog-ng[2390]: Error accepting AF_UNIX connection, opened connections: 100, max: 100
Why is this happening? It isn't accepting logs, it's only sending them. And I also increased the remote logserver's max to 100 with the following line
source s_tcp { tcp( port(<someport>) max-connections(1000)); };
For a start, I don't have 100 hosts logging to the remote logserver. Second, this host isn't the logserver so it shouldn't have this in it's /var/log/messages!!!!
syslog-ng clearly states that it is AF_UNIX connection, thus it is /dev/log that it complains about. You probably have more than 100 processes writing /dev/log. -- Bazsi
ah, sorry I misread that. Ok, I've added max-connections(1000) to the unix-stream() source. Hopefully that will take care of it. -h Hari Sekhon Balazs Scheidler wrote:
On Wed, 2006-10-18 at 13:43 +0100, Hari Sekhon wrote:
I'm getting the following on a host that is sending logs to a remote central logserver:
syslog-ng[2390]: Error accepting AF_UNIX connection, opened connections: 100, max: 100
Why is this happening? It isn't accepting logs, it's only sending them. And I also increased the remote logserver's max to 100 with the following line
source s_tcp { tcp( port(<someport>) max-connections(1000)); };
For a start, I don't have 100 hosts logging to the remote logserver. Second, this host isn't the logserver so it shouldn't have this in it's /var/log/messages!!!!
syslog-ng clearly states that it is AF_UNIX connection, thus it is /dev/log that it complains about.
You probably have more than 100 processes writing /dev/log.
On Wed, 2006-10-18 at 16:07 +0100, Hari Sekhon wrote:
ah, sorry I misread that. Ok, I've added max-connections(1000) to the unix-stream() source. Hopefully that will take care of it.
please note that you might also get out of file descriptors. (ulimit -n) -- Bazsi
participants (2)
-
Balazs Scheidler
-
Hari Sekhon