Ran into an interesting problem. Deploying rsyslog to 4 servers today, all identical CentOS 5.5 boxes: two worked and two do not. Server/App info:
Linux servero01 2.6.18-194.el5 #1 SMP Fri Apr 2 14:58:14 EDT 2010 x86_64 x86_64 x86_64 GNU/Linux rsyslog-3.22.1-3.el5_5.1 All local logging works, but TCP logging does not. When not working I don't even see any packets being sent when I run tcpdump on the local box. Here's what I find in logs when I start rsyslog (rsyslogd -c 3): Feb 20 21:01:50 server01 rsyslogd: registering object 'nsd_ptcp' failed with error code -2061 Feb 20 21:01:50 server01 rsyslogd-2068: could not load module '/usr/lib64/rsyslog/lmnsd_ptcp.so', rsyslog error -2061 This evening, I decided to throw into debug to try to resolve or at least get more info so smarter people than me (this list) could help me diagnose. When I threw in debug (same startup options other than -d), low and behold, it worked fine. I dumped the debug output to file and searched for lmnsd_ptcp and here's what I see: 3513.740387000:action 1 queue[DA]:Reg/w0: caller requested object 'nsd_ptcp', not found (iRet -3003) 3513.740402000:action 1 queue[DA]:Reg/w0: Requested to load module 'lmnsd_ptcp' 3513.740434000:action 1 queue[DA]:Reg/w0: loading module '/usr/lib64/rsyslog/lmnsd_ptcp.so' 3513.740603000:action 1 queue[DA]:Reg/w0: source file nsd_ptcp.c requested reference for module 'lmnetstrms', reference count now 3 3513.740880000:action 1 queue[DA]:Reg/w0: source file netstrms.c requested reference for module 'lmnsd_ptcp', reference count now 1 3513.741541000:action 2 queue[DA]:Reg/w0: source file netstrms.c requested reference for module 'lmnsd_ptcp', reference count now 2 3513.750888000:main thread: Loaded Module: Name='lmnsd_ptcp', IFVersion=4, type=library module. 3553.161187000:action 2 queue:Reg/w0: file netstrms.c released module 'lmnsd_ptcp', reference count now 1 3553.161208000:action 2 queue:Reg/w0: source file netstrms.c requested reference for module 'lmnsd_ptcp', reference count now 2 Any idea why lmnsd (and tcp logging (i'm sure related)) would work in debug mode, but not otherwise? Any clue on where to go next with this is appreciated. Todd Michael Bushnell [email protected] _______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com
