[syslog-ng] syslog-ng and network problem

Fri Jun 11 18:11:36 CEST 2010

HÖLTZL Péter wrote:
> On p, 2010-06-11 at 12:01 +0200, Giovanni Mancuso wrote:
>   
>> The problem is that the messages even if the connection is stablished
>> once again doesn't arrive to the server. 
>>     
>
> Could you please send syslog-ng messages both on the client and the
> server side. I am interested in messages around the LB breaks the
> connection and it is re-establised. If I understand you correctly, the
> LB breaks the connection, than the client establish it again but no
> message is transfered. Right?
>
> Peter
>
>
>   
Right Peter.

I paste a part of the log.

Server:

Jun 11 16:44:40 mmt-l-al36 syslog-ng[2318]: Syslog connection accepted;
fd='15', client='AF_INET(10.35.37.168:46993)',
local='AF_INET(10.35.37.164:10001)'
Jun 11 16:44:40 mmt-l-al36 syslog-ng[2318]: SSL error while reading
stream; tls_error='SSL routines:SSL23_READ:ssl handshake failure'
Jun 11 16:44:40 mmt-l-al36 syslog-ng[2318]: I/O error occurred while
reading; fd='15', error='Connection reset by peer (104)'
Jun 11 16:44:40 mmt-l-al36 syslog-ng[2318]: Syslog connection closed;
fd='15', client='AF_INET(10.35.37.168:46993)',
local='AF_INET(10.35.37.164:10001)'
Jun 11 16:44:42 mmt-l-al36 syslog-ng[2318]: Syslog connection accepted;
fd='15', client='AF_INET(10.35.37.167:50371)',
local='AF_INET(10.35.37.164:10001)'
Jun 11 16:44:42 mmt-l-al36 syslog-ng[2318]: SSL error while reading
stream; tls_error='SSL routines:SSL23_READ:ssl handshake failure'
Jun 11 16:44:42 mmt-l-al36 syslog-ng[2318]: I/O error occurred while
reading; fd='15', error='Connection reset by peer (104)'
Jun 11 16:44:42 mmt-l-al36 syslog-ng[2318]: Syslog connection closed;
fd='15', client='AF_INET(10.35.37.167:50371)',
local='AF_INET(10.35.37.164:10001)'
Jun 11 16:44:45 mmt-l-al36 syslog-ng[2318]: Syslog connection accepted;
fd='15', client='AF_INET(10.35.37.168:47076)',
local='AF_INET(10.35.37.164:10001)'
Jun 11 16:44:45 mmt-l-al36 syslog-ng[2318]: SSL error while reading
stream; tls_error='SSL routines:SSL23_READ:ssl handshake failure'
Jun 11 16:44:45 mmt-l-al36 syslog-ng[2318]: I/O error occurred while
reading; fd='15', error='Connection reset by peer (104)'
Jun 11 16:44:45 mmt-l-al36 syslog-ng[2318]: Syslog connection closed;
fd='15', client='AF_INET(10.35.37.168:47076)',
local='AF_INET(10.35.37.164:10001)'
Jun 11 16:44:47 mmt-l-al36 syslog-ng[2318]: Syslog connection accepted;
fd='15', client='AF_INET(10.35.37.167:50457)',
local='AF_INET(10.35.37.164:10001)'
Jun 11 16:44:47 mmt-l-al36 syslog-ng[2318]: SSL error while reading
stream; tls_error='SSL routines:SSL23_READ:ssl handshake failure'
Jun 11 16:44:47 mmt-l-al36 syslog-ng[2318]: I/O error occurred while
reading; fd='15', error='Connection reset by peer (104)'
Jun 11 16:44:47 mmt-l-al36 syslog-ng[2318]: Syslog connection closed;
fd='15', client='AF_INET(10.35.37.167:50457)',
local='AF_INET(10.35.37.164:10001)'
Jun 11 16:44:49 mmt-l-al36 syslog-ng[2318]: Log statistics;
processed='destination(d_funambol)=13',
processed='src.internal(s_balabit#0)=267517',
stamp='src.internal(s_balabit#0)=1276267487',
processed='source(s_balabit)=267517',
processed='destination(d_gigamail)=4',
processed='destination(d_webmail)=19',
processed='destination(d_dovecot)=3408',
processed='source(s_network)=9556565',
processed='destination(d_balabit)=267517',
processed='center(received)=0', processed='center(queued)=0',
processed='destination(d_maillog)=14579'
Jun 11 16:44:50 mmt-l-al36 syslog-ng[2318]: Syslog connection accepted;
fd='15', client='AF_INET(10.35.37.168:47161)',
local='AF_INET(10.35.37.164:10001)'
Jun 11 16:44:50 mmt-l-al36 syslog-ng[2318]: SSL error while reading
stream; tls_error='SSL routines:SSL23_READ:ssl handshake failure'
Jun 11 16:44:50 mmt-l-al36 syslog-ng[2318]: I/O error occurred while
reading; fd='15', error='Connection reset by peer (104)'
Jun 11 16:44:50 mmt-l-al36 syslog-ng[2318]: Syslog connection closed;
fd='15', client='AF_INET(10.35.37.168:47161)',
local='AF_INET(10.35.37.164:10001)'
Jun 11 16:44:52 mmt-l-al36 syslog-ng[2318]: Syslog connection accepted;
fd='15', client='AF_INET(10.35.37.167:50540)',
local='AF_INET(10.35.37.164:10001)'
Jun 11 16:44:52 mmt-l-al36 syslog-ng[2318]: SSL error while reading
stream; tls_error='SSL routines:SSL23_READ:ssl handshake failure'
Jun 11 16:44:52 mmt-l-al36 syslog-ng[2318]: I/O error occurred while
reading; fd='15', error='Connection reset by peer (104)'
Jun 11 16:44:52 mmt-l-al36 syslog-ng[2318]: Syslog connection closed;
fd='15', client='AF_INET(10.35.37.167:50540)',
local='AF_INET(10.35.37.164:10001)'

Client:

Jun 10 12:49:52 mmt-l-fl13 syslog-ng[27982]: I/O error occurred while
writing; fd='8', error='Connection reset by peer (104)'
Jun 10 12:49:52 mmt-l-fl13 syslog-ng[27982]: Syslog connection broken;
fd='8', server='AF_INET(10.35.37.166:10001)', time_reopen='10'
Jun 10 12:50:02 mmt-l-fl13 syslog-ng[27982]: Syslog connection
established; fd='8', server='AF_INET(10.35.37.166:10001)',
local='AF_INET(0.0.0.0:0)'
Jun 10 12:50:26 mmt-l-fl13 syslog-ng[27982]: Log statistics;
processed='destination(d_network)=1',
dropped='dst.tcp(d_network#0,syslog-aagg-vip:10001)=0',
processed='dst.tcp(d_network#0,syslog-aagg-vip:10001)=1',
stored='dst.tcp(d_network#0,syslog-aagg-vip:10001)=0',
processed='source(s_syslog_pomezia)=2',
processed='src.internal(s_balabit#0)=13',
stamp='src.internal(s_balabit#0)=1276167002',
processed='source(s_balabit)=13',
dropped='dst.tcp(d_logcoll_ssl_pomezia#0,ssb-vip-pomezia.telecomitalia.it:514)=0',
processed='dst.tcp(d_logcoll_ssl_pomezia#0,ssb-vip-pomezia.telecomitalia.it:514)=2',
stored='dst.tcp(d_logcoll_ssl_pomezia#0,ssb-vip-pomezia.telecomitalia.it:514)=0',
processed='source(s_funambol)=22',
processed='destination(d_internal)=13',
processed='destination(d_logcoll_ssl_pomezia)=2',
processed='center(received)=0', processed='center(queued)=0'
Jun 10 12:55:14 mmt-l-fl13 syslog-ng[27982]: Certificate subject matches
configured hostname; hostname='syslog-aagg-vip',
certificate='syslog-aagg-vip'
Jun 10 13:00:26 mmt-l-fl13 syslog-ng[27982]: Log statistics;
processed='destination(d_network)=3',
dropped='dst.tcp(d_network#0,syslog-aagg-vip:10001)=0',
processed='dst.tcp(d_network#0,syslog-aagg-vip:10001)=3',
stored='dst.tcp(d_network#0,syslog-aagg-vip:10001)=0',
processed='source(s_syslog_pomezia)=2',
processed='src.internal(s_balabit#0)=15',
stamp='src.internal(s_balabit#0)=1276167314',
processed='source(s_balabit)=15',
dropped='dst.tcp(d_logcoll_ssl_pomezia#0,ssb-vip-pomezia.telecomitalia.it:514)=0',
processed='dst.tcp(d_logcoll_ssl_pomezia#0,ssb-vip-pomezia.telecomitalia.it:514)=2',
stored='dst.tcp(d_logcoll_ssl_pomezia#0,ssb-vip-pomezia.telecomitalia.it:514)=0',
processed='source(s_funambol)=65',
processed='destination(d_internal)=15',
processed='destination(d_logcoll_ssl_pomezia)=2',
processed='center(received)=0', processed='center(queued)=0'
Jun 10 13:07:43 mmt-l-fl13 syslog-ng[27982]: I/O error occurred while
writing; fd='8', error='Connection reset by peer (104)'
Jun 10 13:07:43 mmt-l-fl13 syslog-ng[27982]: Syslog connection broken;
fd='8', server='AF_INET(10.35.37.166:10001)', time_reopen='10'
Jun 10 13:07:53 mmt-l-fl13 syslog-ng[27982]: Syslog connection
established; fd='8', server='AF_INET(10.35.37.166:10001)',
local='AF_INET(0.0.0.0:0)'
Jun 10 13:10:26 mmt-l-fl13 syslog-ng[27982]: Log statistics;
processed='destination(d_network)=5',
dropped='dst.tcp(d_network#0,syslog-aagg-vip:10001)=0',
processed='dst.tcp(d_network#0,syslog-aagg-vip:10001)=5',
stored='dst.tcp(d_network#0,syslog-aagg-vip:10001)=0',
processed='source(s_syslog_pomezia)=2',
processed='src.internal(s_balabit#0)=19',
stamp='src.internal(s_balabit#0)=1276168073',
processed='source(s_balabit)=19',
dropped='dst.tcp(d_logcoll_ssl_pomezia#0,ssb-vip-pomezia.telecomitalia.it:514)=0',
processed='dst.tcp(d_logcoll_ssl_pomezia#0,ssb-vip-pomezia.telecomitalia.it:514)=2',
stored='dst.tcp(d_logcoll_ssl_pomezia#0,ssb-vip-pomezia.telecomitalia.it:514)=0',
processed='source(s_funambol)=108',
processed='destination(d_internal)=19',
processed='destination(d_logcoll_ssl_pomezia)=2',
processed='center(received)=0', processed='center(queued)=0'

Thanks
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.balabit.hu/pipermail/syslog-ng/attachments/20100611/acace345/attachment-0001.htm 