[syslog-ng] Lots of dropped=tcp(AF_INET(

[Geller, Sandor (IT)]

Hi,

> The issue is that I've got a lot of messages like this one
> (and almost no
> normal ones) generated by host B:
>
> Aug 19 19:25:23 xerxes syslog-ng[20806]: Log statistics;
> dropped='tcp(AF_INET(217.117.75.2:1999))=0',
> processed='center(queued)=112',
> processed='center(receive
> d)=23', processed='destination(newsnotice)=0',
> processed='destination(console)=0', processed='destination(debug)=23',
> processed='destination(mailinfo)=0', proc
> essed='destination(mail)=0', processed='destination(user)=0',
> processed='destination(newserr)=0',
> processed='destination(newscrit)=0',
> processed='destination(u
> ucp)=0', processed='destination(messages)=19',
> processed='destination(mailwarn)=0', processed='destination(ppp)=1',
> processed='destination(loghost)=23', proces
> sed='destination(lpr)=0', processed='destination(cron)=0',
> processed='destination(syslog)=23',
> processed='destination(authlog)=0',
> processed='destination(maile
> rr)=0', processed='destination(kern)=0',
> processed='destination(daemon)=0',
> processed='destination(xconsole)=0',
> processed='destination(console_all)=23',
> proce
> ssed='source(net)=0', processed='s

This is a statistical message generated by syslog-ng, you could set the
frequency of the message by using the stats_freq() option. As far as I
see there aren't dropped messages reported, so I'm not sure what you
want to fix.

Maybe reporting of 0 dropped logs should be omitted, but it would be
only a cosmetic change.

Without seeing the configfile of your log client (host B) I can't
tell whether logs not originated from syslog-ng itself should get
forwarded to host A or not.

Regards,

Sandor
--------------------------------------------------------

NOTICE: If received in error, please destroy and notify sender. Sender does not intend to waive confidentiality or privilege. Use of this email is prohibited when received in error.