On 2015-02-10 08:37 AM, Rainer Gerhards wrote:
> 2015-02-10 16:32 GMT+01:00 James Lay <[email protected] [4]>: > >> Help....just made the switch and seeing a ton of these types of errors: >> >> rsyslogd: Framing Error in received TCP message: delimiter is not SP but has ASCII value 46. > > this sounds like a problem with the sender. Rsyslog is seing invalid protocol handling, more precisely a framing error. ASCII code 46 (the dot) is seen where either < or an integer number must be. > If that's an option, you could capture a tcp session and post the capture file so that I can have a look with wireshark. > Rainer > >> Not even sure where to start to look at this. Thank you. >> >> James >> _______________________________________________ >> rsyslog mailing list >> http://lists.adiscon.net/mailman/listinfo/rsyslog [1] >> http://www.rsyslog.com/professional-services/ [2] >> What's up with rsyslog? Follow https://twitter.com/rgerhards [3] >> NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE THAT. Thanks for the speedy response Rainer. I'm capturing now...this *might* have been happening during the transition....last one I saw was at 09:01 and I started my capture at 09:02 8-| I'll post what I find...thanks again. James Links: ------ [1] http://lists.adiscon.net/mailman/listinfo/rsyslog [2] http://www.rsyslog.com/professional-services/ [3] https://twitter.com/rgerhards [4] mailto:[email protected] _______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com/professional-services/ What's up with rsyslog? Follow https://twitter.com/rgerhards NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE THAT.
