Re: Error messages from syslogd

Rainer Gerhards <[email protected]>
Newsgroups gmane.comp.sysutils.loganalysis
Message-ID <[email protected]>
Tina,

for rsyslog I reply somewhat more elaborate a bit later. Here are the
messages for sysklogd, taken from the sources (grep logerror syslogd.c
if you'd like to give it a try):

syslogd.c:              logerror("Cannot allocate memory for message
parts table.");
syslogd.c:                              logerror("select");
syslogd.c:                              logerror("recvfrom UNIX");
syslogd.c:                              logerror("recvfrom inet");
syslogd.c:                                      logerror("stdin");
syslogd.c:              logerror(line);
syslogd.c:              logerror("syslog: Unknown protocol, suspending
inet service.");
syslogd.c:              logerror("setsockopt(REUSEADDR), suspending
inet");
syslogd.c:              logerror("setsockopt(BSDCOMPAT), suspending
inet");
syslogd.c:              logerror("bind, suspending inet");
syslogd.c:                      logerror("Cannot glue message parts
together");
syslogd.c:                      logerror("Cannot allocate memory for
message part.");
syslogd.c:                              logerror("sendto");
syslogd.c:
logerror(f->f_un.f_fname);
syslogd.c:                              logerror(f->f_un.f_fname);
syslogd.c:void logerror(type)
syslogd.c:              logerror("network logging disabled (syslog/udp
service unknown).");
syslogd.c:              logerror("see syslogd(8) for details of whether
and how to enable it.");
syslogd.c:                      logerror("Cannot initialize log
structure.");
syslogd.c:                      logerror("Cannot grow log structure.");

All of these are usually followed by an operating system error message
(like "file not found). Most message occur only on very rare occasions.

Probably the most interesting message is the one you have quoted:

"syslogd VERSION: restart (remote reception)"

which is written whenever syslogd is restarted (which also means on
HUPing it). Note that the "(remote reception)" part is only present if
the -r option is specified.

HTH
Rainer

On Tue, 2007-07-10 at 23:38 -0700, Tina Bird wrote:
> Hi all --
> 
> Does anyone have examples of error messages generated by syslogd itself? The
> only thing I've found in any of the data I've got on hand is 
> 
> Jul 10 00:00:00 <syslog.info> bettiepage syslogd: restart
> 
> which as these things go is not really very interesting.
> 
> Any info gratefully accepted -- tbird
> _______________________________________________
> LogAnalysis mailing list
> [email protected]
> http://www.loganalysis.org/mailman/listinfo/loganalysis
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.