Mailinglist Archive: opensuse-bugs (8118 mails)

< Previous Next >
[Bug 249555] New: syslog-ng loses connection to dhcpd after syslog restart
  • From: bugzilla_noreply@xxxxxxxxxx
  • Date: Tue, 27 Feb 2007 15:30:52 -0700 (MST)
  • Message-id: <bug-249555-21960@xxxxxxxxxxxxxxxxxxxxxxxxx/>
https://bugzilla.novell.com/show_bug.cgi?id=249555

Summary: syslog-ng loses connection to dhcpd after syslog restart
Product: openSUSE 10.2
Version: Final
Platform: Other
OS/Version: Other
Status: NEW
Severity: Major
Priority: P5 - None
Component: Basesystem
AssignedTo: bnc-team-screening@xxxxxxxxxxxxxxxxxxxxxx
ReportedBy: kernel01@xxxxxxxxxxxxxx
QAContact: qa@xxxxxxx


dhcpd uses openlog(), syslog() to log its messages. However, the fd it uses for
syslog() gets ignored (even after reopening the socket) after a syslog-ng
restart.

Feb 23 02:12:57 big dhcpd: DHCPINFORM from x.x.x.x via eth0
Feb 23 02:12:57 big dhcpd: DHCPACK to x.x.x.x via eth0
Feb 23 02:13:32 big dhcpd: DHCPINFORM from x.x.x.x via eth0
Feb 23 02:13:32 big dhcpd: DHCPACK to x.x.x.x via eth0
Feb 23 02:13:51 big dhcpd: DHCPREQUEST for x.x.x.x via eth0
Feb 23 02:13:51 big dhcpd: DHCPACK on x.x.x.x via eth0
Feb 23 02:15:01 big syslog-ng[2531]: SIGHUP received, restarting syslog-ng
Feb 23 02:15:02 big syslog-ng[2531]: new configuration initialized
Feb 23 02:16:03 big kernel: klogd 1.4.1, ---------- state change ----------
Feb 23 02:16:13 big syslog-ng[2531]: Changing permissions on special file
/dev/xconsole
Feb 23 02:16:13 big syslog-ng[2531]: Changing permissions on special file
/dev/tty10
Feb 23 03:15:02 big syslog-ng[2531]: STATS: dropped 51
Feb 23 04:15:03 big syslog-ng[2531]: STATS: dropped 0

Steps to reproduce:
* Start dhcpd when syslog-ng is already running
* Generate some dhcp requests (e.g. with "dhcpcd-test eth0")
* See the dhcp server logs in /var/log/messages
* Restart syslog-ng ("killall -HUP syslog-ng")
* Generate some more dhcp requests (e.g. with "dhcpcd-test eth0")
* No more dhcp server logs in /var/log/messages

Pointers to maybe related/similar problems:
https://lists.balabit.hu/pipermail/syslog-ng/2003-February/004611.html
https://lists.balabit.hu/pipermail/syslog-ng/2003-February/004613.html
https://lists.balabit.hu/pipermail/syslog-ng/2003-February/004617.html

Stracing dhcpd shows:

sendto(3, "<30>Feb 27 23:18:17 dhcpd: DHCPA"..., 81, MSG_NOSIGNAL, NULL, 0) =
81
sendto(3, "<30>Feb 27 23:18:22 dhcpd: DHCPI"..., 66, MSG_NOSIGNAL, NULL, 0) =
66
sendto(3, "<30>Feb 27 23:18:22 dhcpd: DHCPA"..., 81, MSG_NOSIGNAL, NULL, 0) =
81
<now we restart syslog-ng>
sendto(3, "<30>Feb 27 23:19:20 dhcpd: DHCPR"..., 104, MSG_NOSIGNAL, NULL, 0) =
-1 ECONNREFUSED (Connection refused)
close(3) = 0
socket(PF_FILE, SOCK_DGRAM, 0) = 0
fcntl(0, F_SETFD, FD_CLOEXEC) = 0
connect(0, {sa_family=AF_FILE, path="/dev/log"}, 110) = 0
sendto(0, "<30>Feb 27 23:19:20 dhcpd: DHCPR"..., 104, MSG_NOSIGNAL, NULL, 0) =
104

You can see from the log that dhcpd tries to reopen a connection to syslog, and
that even works. Stracing syslog shows that syslog receives the messages from
dhcpd on the new socket, but it discards all of them.

At the moment, I assume that the socket between syslog-ng and dhcpd is in a
different class after syslog-ng restart.


--
Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are on the CC list for the bug, or are watching someone who is.

< Previous Next >
Follow Ups