[syslog-ng] I/O error occurred while writing; fd=\'6\', error=\'Connection refused (111)\'

[Sandor Geller]

Hi,

On Mon, Jun 8, 2009 at 4:01 PM, Clayton Dukes<cdukes at gmail.com> wrote:
> Sorry, I'm just confused.

NP, we're here to help :)

[ cut ]

> Strace output:
>
> 16624 write(14, "<187>Jun  8 06:59:16 vnt-cm1c.cis"..., 464) = -1
> ECONNREFUSED (Connection refused)
>
> # nslookup vnt-cm1c
>
> Name:   vnt-cm1c.x.com
> Address: 172.18.106.60

The connection error isn't related to this host. Syslog-ng wants to
log a message originating *from* the host and there is a problem with
a remote destination. We still don't know what destination would be fd
14. Could you provide more strace info, where syslog-ng tries to use
fd 14? I'm interested in the failing connect() call and the preceeding
socket() which returned fd 14 to see what's the remote side.

BTW these are the candidates:

> destination d_unitylab {
>    udp("172.18.106.206" port (514));
> };
> # Set destnation to Scott's server
> destination d_ucsyslog {
>    udp("172.18.86.112" port (514));
> };

Regards,

Sandor