[Bug 249555] New: syslog-ng loses connection to dhcpd after syslog restart
https://bugzilla.novell.com/show_bug.cgi?id=249555 Summary: syslog-ng loses connection to dhcpd after syslog restart Product: openSUSE 10.2 Version: Final Platform: Other OS/Version: Other Status: NEW Severity: Major Priority: P5 - None Component: Basesystem AssignedTo: bnc-team-screening@forge.provo.novell.com ReportedBy: kernel01@hailfinger.org QAContact: qa@suse.de dhcpd uses openlog(), syslog() to log its messages. However, the fd it uses for syslog() gets ignored (even after reopening the socket) after a syslog-ng restart. Feb 23 02:12:57 big dhcpd: DHCPINFORM from x.x.x.x via eth0 Feb 23 02:12:57 big dhcpd: DHCPACK to x.x.x.x via eth0 Feb 23 02:13:32 big dhcpd: DHCPINFORM from x.x.x.x via eth0 Feb 23 02:13:32 big dhcpd: DHCPACK to x.x.x.x via eth0 Feb 23 02:13:51 big dhcpd: DHCPREQUEST for x.x.x.x via eth0 Feb 23 02:13:51 big dhcpd: DHCPACK on x.x.x.x via eth0 Feb 23 02:15:01 big syslog-ng[2531]: SIGHUP received, restarting syslog-ng Feb 23 02:15:02 big syslog-ng[2531]: new configuration initialized Feb 23 02:16:03 big kernel: klogd 1.4.1, ---------- state change ---------- Feb 23 02:16:13 big syslog-ng[2531]: Changing permissions on special file /dev/xconsole Feb 23 02:16:13 big syslog-ng[2531]: Changing permissions on special file /dev/tty10 Feb 23 03:15:02 big syslog-ng[2531]: STATS: dropped 51 Feb 23 04:15:03 big syslog-ng[2531]: STATS: dropped 0 Steps to reproduce: * Start dhcpd when syslog-ng is already running * Generate some dhcp requests (e.g. with "dhcpcd-test eth0") * See the dhcp server logs in /var/log/messages * Restart syslog-ng ("killall -HUP syslog-ng") * Generate some more dhcp requests (e.g. with "dhcpcd-test eth0") * No more dhcp server logs in /var/log/messages Pointers to maybe related/similar problems: https://lists.balabit.hu/pipermail/syslog-ng/2003-February/004611.html https://lists.balabit.hu/pipermail/syslog-ng/2003-February/004613.html https://lists.balabit.hu/pipermail/syslog-ng/2003-February/004617.html Stracing dhcpd shows: sendto(3, "<30>Feb 27 23:18:17 dhcpd: DHCPA"..., 81, MSG_NOSIGNAL, NULL, 0) = 81 sendto(3, "<30>Feb 27 23:18:22 dhcpd: DHCPI"..., 66, MSG_NOSIGNAL, NULL, 0) = 66 sendto(3, "<30>Feb 27 23:18:22 dhcpd: DHCPA"..., 81, MSG_NOSIGNAL, NULL, 0) = 81 <now we restart syslog-ng> sendto(3, "<30>Feb 27 23:19:20 dhcpd: DHCPR"..., 104, MSG_NOSIGNAL, NULL, 0) = -1 ECONNREFUSED (Connection refused) close(3) = 0 socket(PF_FILE, SOCK_DGRAM, 0) = 0 fcntl(0, F_SETFD, FD_CLOEXEC) = 0 connect(0, {sa_family=AF_FILE, path="/dev/log"}, 110) = 0 sendto(0, "<30>Feb 27 23:19:20 dhcpd: DHCPR"..., 104, MSG_NOSIGNAL, NULL, 0) = 104 You can see from the log that dhcpd tries to reopen a connection to syslog, and that even works. Stracing syslog shows that syslog receives the messages from dhcpd on the new socket, but it discards all of them. At the moment, I assume that the socket between syslog-ng and dhcpd is in a different class after syslog-ng restart. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug, or are watching someone who is.
https://bugzilla.novell.com/show_bug.cgi?id=249555 ------- Comment #1 from kernel01@hailfinger.org 2007-02-27 15:35 MST ------- Interesting quote from /etc/syslog-ng.conf: # This syslog-ng contains an extension and appends the # sockets added by "-a" option to the same source group # and using the same socket type (unix-dgram) as the # "/dev/log" socket. # If one of the sockets added by "-a" option already # exists in any (other) source group in the config file, # then the socket added by "-a" option is ignored. Let me guess: The extension forgot to handle syslog-ng restart correctly. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug, or are watching someone who is.
https://bugzilla.novell.com/show_bug.cgi?id=249555 chrubis@novell.com changed: What |Removed |Added ---------------------------------------------------------------------------- AssignedTo|bnc-team- |mt@novell.com |screening@forge.provo.novell| |.com | -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug, or are watching someone who is.
https://bugzilla.novell.com/show_bug.cgi?id=249555 mt@novell.com changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |ASSIGNED -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug, or are watching someone who is.
https://bugzilla.novell.com/show_bug.cgi?id=249555 ------- Comment #2 from mt@novell.com 2007-03-01 13:03 MST ------- Created an attachment (id=121883) --> (https://bugzilla.novell.com/attachment.cgi?id=121883&action=view) proposed fix Test RPMs will appear soon at http://www.suse.de/~mt/syslog-ng/ (Check syslog-ng.changes is there containing bug number) -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug, or are watching someone who is.
https://bugzilla.novell.com/show_bug.cgi?id=249555 mt@novell.com changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |security-team@suse.de ------- Comment #3 from mt@novell.com 2007-03-01 13:13 MST ------- (In reply to comment #1)
Let me guess: The extension forgot to handle syslog-ng restart correctly.
Yes :-( Would be cool if you can test it using the above RPMs. There is also a patch applied, that rejects the config in case of recursions in filter defs, e.g. filter foo { filter(foo); }; -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug, or are watching someone who is.
https://bugzilla.novell.com/show_bug.cgi?id=249555 ------- Comment #4 from kernel01@hailfinger.org 2007-03-01 13:25 MST ------- Sorry, I'm on x86_64 and can't test i386 rpms. (Well yes, I could, but then I would have to install all the 32bit compat stuff.) -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug, or are watching someone who is.
https://bugzilla.novell.com/show_bug.cgi?id=249555 ------- Comment #5 from mt@novell.com 2007-03-02 05:07 MST ------- The x86_64 RPMs are in http://www.suse.de/~mt/syslog-ng/10.2-x86_64/ It just takes some time to mirror... -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug, or are watching someone who is.
https://bugzilla.novell.com/show_bug.cgi?id=249555 ------- Comment #6 from kernel01@hailfinger.org 2007-03-02 05:49 MST ------- Thanks! The new rpms indeed fix the problem. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug, or are watching someone who is.
https://bugzilla.novell.com/show_bug.cgi?id=249555 mt@novell.com changed: What |Removed |Added ---------------------------------------------------------------------------- Status|ASSIGNED |RESOLVED Resolution| |FIXED ------- Comment #10 from mt@novell.com 2007-03-13 09:15 MST ------- Fixed packages and patchinfo submitted. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug, or are watching someone who is.
https://bugzilla.novell.com/show_bug.cgi?id=249555 ------- Comment #11 from ast@novell.com 2007-03-22 05:40 MST ------- released for box -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug, or are watching someone who is.
participants (1)
-
bugzilla_noreply@novell.com