[syslog-ng]Re: Crash problems on Solaris

Balazs Scheidler bazsi@balabit.hu
Thu, 10 Oct 2002 12:08:23 +0200


On Thu, Oct 10, 2002 at 06:53:58PM +0900, Katsuhiro Kondou wrote:
> In article <20021010090900.GD24001@balabit.hu>,
> 	Balazs Scheidler <bazsi@balabit.hu> wrote;
> 
> } do you have remote sources? (e.g. udp or tcp?)
> 
> Yes.
> 
> } if yes, which one is loaded?
> 
> Both.  tcp from solaris has 32 connections and udp
> from network equipments like Catalyst and NetScreen
> has 50 sources.

I've tested my setup with UDP. This means I have to add a TCP source.

Do those TCP connections break?

> 
> } this is my config now:
> 
> Mine is;
> 
> source local { sun-streams("/dev/log" door("/etc/.syslog_door")); internal(); };
> source net_tcp { tcp(max-connections(100)); };
> source net_udp { udp(); };
> 
> } I'm sending messages through udp and from locally as well.
> 
> Mine sends thru tcp to another(backup) syslog server.

is the backup server restarted? I'm interested in whether the connection
between your log server and the backup server is broken for some reason.

-- 
Bazsi
PGP info: KeyID 9AF8D0A9 Fingerprint CD27 CFB0 802C 0944 9CFD 804E C82C 8EB1