[syslog-ng] Lots of dropped=tcp(AF_INET(

Ivan Lezhnjov Jr. ivan.lezhnjov.jr at gmail.com
Tue Aug 19 18:39:30 CEST 2008


Hello

I have two hosts on my LAN running syslog-ng. Host A acts as central loghost 
and host B sends its log messages via tcp/ip network connection to host A to 
store.

The issue is that I've got a lot of messages like this one (and almost no 
normal ones) generated by host B:

Aug 19 19:25:23 xerxes syslog-ng[20806]: Log statistics; 
dropped='tcp(AF_INET(217.117.75.2:1999))=0', processed='center(queued)=112', 
processed='center(receive
d)=23', processed='destination(newsnotice)=0', 
processed='destination(console)=0', processed='destination(debug)=23', 
processed='destination(mailinfo)=0', proc
essed='destination(mail)=0', processed='destination(user)=0', 
processed='destination(newserr)=0', processed='destination(newscrit)=0', 
processed='destination(u
ucp)=0', processed='destination(messages)=19', 
processed='destination(mailwarn)=0', processed='destination(ppp)=1', 
processed='destination(loghost)=23', proces
sed='destination(lpr)=0', processed='destination(cron)=0', 
processed='destination(syslog)=23', processed='destination(authlog)=0', 
processed='destination(maile
rr)=0', processed='destination(kern)=0', processed='destination(daemon)=0', 
processed='destination(xconsole)=0', processed='destination(console_all)=23', 
proce
ssed='source(net)=0', processed='s

While it is obvious that dropped tcp speaks of network issues it isn't really 
clear to me (being a novice syslog-ng user) what exactly goes wrong here.

So, could you please explain what's wrong with host B and how I can fix that?

-- 

  Ivan Lezhnjov Jr.

  Europe, Ukraine, Simferopol

  Running
  Source Mage GNU/Linux, kernel version 2.6.24 build #5

+----------------------------------------------------------------------+

           Key ID 0x5811D90C
  Key Fingerprint 2A52 5C8C 38BE C04F D8DE  A169 19E2 E49A 5811 D90C
          Use GPG Exercise Your Right To Privacy 
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 197 bytes
Desc: This is a digitally signed message part.
Url : http://lists.balabit.hu/pipermail/syslog-ng/attachments/20080819/8dfccdb0/attachment.pgp 


More information about the syslog-ng mailing list