On Thu, 3 Jul 2014, user01 wrote:
Hi
On Wed, 2 Jul 2014 22:59:03 -0700 (PDT)
David Lang <[email protected]> wrote:
even with drop a failover should work
Dropping a packet via paketfilter still leaves arp-resolution intact. Therefore
intermediate routers (or your log-client) will not generate a "host unreachable"
or something similar. It would be up to the associated tcp-client (rsyslogd in
this
case) to detect subsequent connection failures and flag an error. Your OS can`t
do
anything about this situation.
actually, the app does't have any way of knowing that acks aren't arriving, only
the OS knows that. Eventually the connection should be timed out and closed by
the OS, which then generates an error to the application (but the application
has no way of knowing how much of the data that it has sent was lost when this
error happens)
Maybe dropping arp-resolution for that particular client or server could
simulate an
more accurate "syslog-server has died"? :)
not really, the OS will cache the arp-resolution for a while.
David Lang
_______________________________________________
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of
sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE
THAT.
