[syslog-ng] I/O errors
r.fulton at auckland.ac.nz
Mon Jun 17 22:18:30 CEST 2013
On 18/06/2013, at 8:07 AM, Russell Fulton <r.fulton at auckland.ac.nz> wrote:
> On 17/06/2013, at 11:44 PM, Balazs Scheidler <bazsi77 at gmail.com> wrote:
>> the peer has terminated the connection in which case syslog-ng automatically reconnects. these lines should contain more information :(
>> anyway, you can find out what happens by tcpdumping the network interface and looking for RST packets.
> Thanks Bazsi! will do. The only connection is to another machine also running syslog-ng. Any hints on what might cause it to reset the connection. There is not a huge load being forwarded — order of tens of logs/sec.
Oh, I see. These are incoming connection not outgoing ones! That makes more sense. I had not realised that that many of our boxes were using tcp to send stuff to our loghost.
Now I have a handle on this I will follow it up.
More information about the syslog-ng