All surpassed messages are from Dec 31
This is strange. All suppressed messages I see have the Msg date re-written as "Dec 31 23:59:58”. Date never changes. Msg: Dec 31 23:59:58 192.168.100.73 Fdm[31436]: Last message '[FFE56B90 verbose 'P' repeated 1 times, suppressed by syslog-ng on
I thou dadd this was from a tcpdump capture.
On Oct 13, 2016, at 2:07 PM, Scot Needy <scotrn@gmail.com> wrote:
This is strange.
All suppressed messages I see have the Msg date re-written as "Dec 31 23:59:58”. Date never changes.
Msg: Dec 31 23:59:58 192.168.100.73 Fdm[31436]: Last message '[FFE56B90 verbose 'P' repeated 1 times, suppressed by syslog-ng on
That was terrible. I should add that I saw this from a tcpdump.
On Oct 14, 2016, at 10:09 AM, Scot Needy <scotrn@gmail.com> wrote:
I thou dadd this was from a tcpdump capture.
On Oct 13, 2016, at 2:07 PM, Scot Needy <scotrn@gmail.com> wrote:
This is strange.
All suppressed messages I see have the Msg date re-written as "Dec 31 23:59:58”. Date never changes.
Msg: Dec 31 23:59:58 192.168.100.73 Fdm[31436]: Last message '[FFE56B90 verbose 'P' repeated 1 times, suppressed by syslog-ng on
This branch should fix your issue: https://github.com/balabit/syslog-ng/pull/1233 against current master. Some testing would be appreciated. On Fri, Oct 14, 2016 at 7:10 PM, Scot Needy <scotrn@gmail.com> wrote:
That was terrible.
I should add that I saw this from a tcpdump.
On Oct 14, 2016, at 10:09 AM, Scot Needy <scotrn@gmail.com> wrote:
I thou dadd this was from a tcpdump capture.
On Oct 13, 2016, at 2:07 PM, Scot Needy <scotrn@gmail.com> wrote:
This is strange.
All suppressed messages I see have the Msg date re-written as "Dec 31 23:59:58”. Date never changes.
Msg: Dec 31 23:59:58 192.168.100.73 Fdm[31436]: Last message '[FFE56B90 verbose 'P' repeated 1 times, suppressed by syslog-ng on
____________________________________________________________ __________________ Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng Documentation: http://www.balabit.com/support/documentation/? product=syslog-ng FAQ: http://www.balabit.com/wiki/syslog-ng-faq
-- Bazsi
Thanks Bazsi, I wasn’t sure if it was me or syslog-ng. I will try and get a build server back up this week and test.. Do you know if Balabit has a nightly build repo to make testing easier ? Scot
On Oct 16, 2016, at 6:41 AM, Balazs Scheidler <bazsi77@gmail.com> wrote:
This branch should fix your issue: https://github.com/balabit/syslog-ng/pull/1233 <https://github.com/balabit/syslog-ng/pull/1233> against current master. Some testing would be appreciated.
On Fri, Oct 14, 2016 at 7:10 PM, Scot Needy <scotrn@gmail.com <mailto:scotrn@gmail.com>> wrote: That was terrible.
I should add that I saw this from a tcpdump.
On Oct 14, 2016, at 10:09 AM, Scot Needy <scotrn@gmail.com <mailto:scotrn@gmail.com>> wrote:
I thou dadd this was from a tcpdump capture.
On Oct 13, 2016, at 2:07 PM, Scot Needy <scotrn@gmail.com <mailto:scotrn@gmail.com>> wrote:
This is strange.
All suppressed messages I see have the Msg date re-written as "Dec 31 23:59:58”. Date never changes.
Msg: Dec 31 23:59:58 192.168.100.73 Fdm[31436]: Last message '[FFE56B90 verbose 'P' repeated 1 times, suppressed by syslog-ng on
______________________________________________________________________________ Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng <https://lists.balabit.hu/mailman/listinfo/syslog-ng> Documentation: http://www.balabit.com/support/documentation/?product=syslog-ng <http://www.balabit.com/support/documentation/?product=syslog-ng> FAQ: http://www.balabit.com/wiki/syslog-ng-faq <http://www.balabit.com/wiki/syslog-ng-faq>
-- Bazsi ______________________________________________________________________________ Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng Documentation: http://www.balabit.com/support/documentation/?product=syslog-ng FAQ: http://www.balabit.com/wiki/syslog-ng-faq
There's a docker image that makes it easy to build syslog-ng, and we build and run tests on every commit in travis, but I dont know about public nightly builds. On Oct 19, 2016 06:28, "Scot Needy" <scotrn@gmail.com> wrote:
Thanks Bazsi, I wasn’t sure if it was me or syslog-ng. I will try and get a build server back up this week and test..
Do you know if Balabit has a nightly build repo to make testing easier ?
Scot
On Oct 16, 2016, at 6:41 AM, Balazs Scheidler <bazsi77@gmail.com> wrote:
This branch should fix your issue: https://github.com/balabit/ syslog-ng/pull/1233 against current master. Some testing would be appreciated.
On Fri, Oct 14, 2016 at 7:10 PM, Scot Needy <scotrn@gmail.com> wrote:
That was terrible.
I should add that I saw this from a tcpdump.
On Oct 14, 2016, at 10:09 AM, Scot Needy <scotrn@gmail.com> wrote:
I thou dadd this was from a tcpdump capture.
On Oct 13, 2016, at 2:07 PM, Scot Needy <scotrn@gmail.com> wrote:
This is strange.
All suppressed messages I see have the Msg date re-written as "Dec 31 23:59:58”. Date never changes.
Msg: Dec 31 23:59:58 192.168.100.73 Fdm[31436]: Last message '[FFE56B90 verbose 'P' repeated 1 times, suppressed by syslog-ng on
____________________________________________________________ __________________ Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng Documentation: http://www.balabit.com/support/documentation/?product= syslog-ng FAQ: http://www.balabit.com/wiki/syslog-ng-faq
-- Bazsi ____________________________________________________________ __________________ Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng Documentation: http://www.balabit.com/support/documentation/? product=syslog-ng FAQ: http://www.balabit.com/wiki/syslog-ng-faq
____________________________________________________________ __________________ Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng Documentation: http://www.balabit.com/support/documentation/? product=syslog-ng FAQ: http://www.balabit.com/wiki/syslog-ng-faq
participants (2)
-
Balazs Scheidler
-
Scot Needy