Hi,
on Debian Jessie with rsyslog-8.4.2-1+deb8u2 I am experiencing
truncated/mixed log messages. Please see the attached anonymized log sample:
Line 5:
- Hostname (imap2) truncated (probably the whole following message
is lost)
- New message starts in the truncated one
Line 7:
- Message starts without a date?
- Maybe this is the truncated message from line 5?
Line 13/19:
- Same like 5 and 7?
Line 27/29:
- Same like 5 and7?
Line 34/35:
- Same like 5 and7?
Line 41:
- Not sure where this line started, but this is just a selection from
the log file, maybe I missed that line.
...
>From "/etc/rsyslog.d/40-sep-mail.conf":
> if $syslogfacility-text == 'mail' then {
> if $programname == 'dovecot' then {
> if $msg startswith ' pop3' then {
> action(
> type="omfile"
> File="/var/log/dovecot.log"
> FileOwner="root"
> FileGroup="adm"
> asyncWriting="on"
> flushInterval="30"
> )
> stop
> }
> else if $msg startswith ' imap' then {
> action(
> type="omfile"
> File="/var/log/dovecot.log"
> FileOwner="root"
> FileGroup="adm"
> asyncWriting="on"
> flushInterval="30"
> )
> stop
> }
> }
In "/etc/rsyslog.d/50-default.conf" I am logging the remaining mail.*
messages, also asynchronous,
> mail.* action(
> type="omfile"
> File="/var/log/mail.log"
> FileOwner="root"
> FileGroup="adm"
> asyncWriting="on"
> flushInterval="30"
> )
but I haven't seen any corrupt message yet in "mail.log" like I have
seen in "dovecot.log".
I have now turned off "asyncWriting" for "dovecot.log" for testing.
Is this normal or a known (fixed) bug?
PS: Any chance to get a recent rsyslog for Debian Jessie
(https://github.com/rsyslog/rsyslog-pkg-debian/issues/5)? Don't want to
pull in from testing/sid.
-Thomas
Jan 27 00:09:41 imap2 dovecot: pop3([email protected]): Disconnected:
Logged out top=0/0, retr=0/0, del=0/0, size=0
Jan 27 00:09:41 imap2 dovecot: pop3-login: Login: user=<[email protected]>,
method=PLAIN, rip=1.2.3.4, lip=9.8.7.6, mpid=8858, TLS, TLSv1 with cipher
ECDHE-RSA-AES256-SHA (256/256 bits)
Jan 27 00:09:41 imap2 dovecot: pop3([email protected]): Disconnected:
Logged out top=0/0, retr=0/0, del=0/0, size=0
Jan 27 00:09:41 imap2 dovecot: pop3-login: Login: user=<[email protected]>,
method=PLAIN, rip=1.2.3.4, lip=9.8.7.6, mpid=8859, TLS, TLSv1 with cipher
ECDHE-RSA-AES256-SHA (256/256 bits)
Jan 27 00:09:41 imapJan 27 00:09:31 imap2 dovecot: imap-login: Login:
user=<[email protected]>, method=PLAIN, rip=1.2.3.4, lip=9.8.7.6, mpid=8845,
TLS, TLSv1.2 with cipher DHE-RSA-AES256-GCM-SHA384 (256/256 bits)
Jan 27 00:09:31 imap2 dovecot: imap([email protected]): Disconnected:
Logged out in=12 out=427
2 dovecot: pop3([email protected]): Disconnected: Logged out top=0/0,
retr=0/0, del=0/0, size=0
Jan 27 00:09:41 imap2 dovecot: pop3-login: Login: user=<[email protected]>,
method=PLAIN, rip=1.2.3.4, lip=9.8.7.6, mpid=8860, TLS, TLSv1 with cipher
ECDHE-RSA-AES256-SHA (256/256 bits)
Jan 27 00:09:41 imap2 dovecot: pop3([email protected]): Disconnected:
Logged out top=0/0, retr=0/0, del=0/0, size=0
Jan 27 00:15:33 imap2 dovecot: pop3([email protected]): Disconnected:
Logged out top=0/0, retr=0/0, del=0/0, size=0
Jan 27 00:15:33 imap2 dovecot: pop3-login: Login: user=<[email protected]>,
method=PLAIN, rip=1.2.3.4, lip=9.8.7.6, mpid=11840, TLS, TLSv1 with cipher
ECDHE-RSA-AES256-SHA (256/256 bits)
Jan 27 00:15:33 imap2 dovecot: pop3([email protected]): Disconnected:
Logged out top=0/0, retr=0/0, del=0/0, size=0
Jan 27Jan 27 00:15:28 imap2 dovecot: imap-login: Login:
user=<[email protected]>, method=PLAIN, rip=1.2.3.4, lip=9.8.7.6, mpid=11826,
TLS, TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)
Jan 27 00:15:28 imap2 dovecot: imap-login: Login: user=<[email protected]>,
method=PLAIN, rip=1.2.3.4, lip=9.8.7.6, mpid=11827, TLS, TLSv1 with cipher
DHE-RSA-AES256-SHA (256/256 bits)
Jan 27 00:15:28 imap2 dovecot: imap([email protected]): ID sent:
name=iPhone Mail, version=13D15, os=iOS, os-version=9.2.1 (13D15)
Jan 27 00:15:28 imap2 dovecot: imap([email protected]): ID sent:
name=iPhone Mail, version=13D15, os=iOS, os-version=9.2.1 (13D15)
Jan 27 00:15:29 imap2 dovecot: imap-login: Login: user=<[email protected]>,
method=PLAIN, rip=1.2.3.4, lip=9.8.7.6, mpid=11828, TLS, TLSv1 with cipher
DHE-RSA-AES256-SHA (256/256 bits)
Jan 27 00:15:29 imap2 dovecot: imap([email protected]): ID sent:
name=iPhone Mail, version=13D15, os=iOS, os-version=9.2.1 (13D15)
00:15:33 imap2 dovecot: pop3-login: Login: user=<[email protected]>,
method=PLAIN, rip=1.2.3.4, lip=9.8.7.6, mpid=11841, TLS, TLSv1 with cipher
ECDHE-RSA-AES256-SHA (256/256 bits)
Jan 27 00:15:34 imap2 dovecot: pop3([email protected]): Disconnected:
Logged out top=0/0, retr=0/0, del=0/0, size=0
Jan 27 00:15:55 imap2 dovecot: pop3-login: Login: user=<[email protected]>,
method=PLAIN, rip=1.2.3.4, lip=9.8.7.6, mpid=11895, TLS, TLSv1.2 with cipher
ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)
Jan 27 00:15:55 imap2 dovecot: pop3([email protected]): Disconnected:
Logged out top=0/0, retr=0/0, del=0/0, size=0
Jan 27 00:16:48 imap2 dovecot: pop3-login: Login: user=<[email protected]>,
method=PLAIN, rip=1.2.3.4, lip=9.8.7.6, mpid=11915, TLS, TLSv1 with cipher
ECDHE-RSA-AES256-SHA (256/256 bits)
Jan 27 00:16:49 imap2 dovecot: pop3([email protected]): Disconnected:
Logged out top=0/0, retr=0/0, del=0/0, size=0
Jan 27 00:19:35 imap2 dovecot: pop3([email protected]): Disconnected:
Logged out top=0/0, retr=0/0, del=0/0, size=0
Jan 27 00:19:35 imap2 dovecot: pop3-login: Login: user=<[email protected]>,
method=PLAIN, rip=1.2.3.4, lip=9.8.7.6, mpid=11992, TLS, TLSv1 with cipher
ECDHE-RSA-AES256-SHA (256/256 bits)
Jan 27 Jan 27 00:19:32 imap2 dovecot: imap-login: Login:
user=<[email protected]>, method=PLAIN, rip=1.2.3.4, lip=9.8.7.6, mpid=11982,
TLS, TLSv1.2 with cipher DHE-RSA-AES256-GCM-SHA384 (256/256 bits)
Jan 27 00:19:33 imap2 dovecot: imap([email protected]): Disconnected:
Logged out in=12 out=427
00:19:35 imap2 dovecot: pop3([email protected]): Disconnected: Logged out
top=0/0, retr=0/0, del=0/0, size=0
Jan 27 00:19:35 imap2 dovecot: pop3-login: Login: user=<[email protected]>,
method=PLAIN, rip=1.2.3.4, lip=9.8.7.6, mpid=11993, TLS, TLSv1 with cipher
ECDHE-RSA-AES256-SHA (256/256 bits)
Jan 27 00:19:35 imap2 dovecot: pop3([email protected]): Disconnected:
Logged out top=0/0, retr=0/0, del=0/0, size=0
Jan 27 00:25:38 imap2 dovecot: pop3([email protected]): Disconnected:
Logged out top=0/0, retr=0/0, del=0/0, size=0
Jan 27 00:25:38 imap2 dovecot: pop3-login: Login: user=<[email protected]>,
method=PLAIN, rip=1.2.3.4, lip=9.8.7.6, mpid=12285, TLS, TLSv1 with cipher
ECDHE-RSA-AES256-SHA (256/256 bits)
Jan 27 00:25Jan 27 00:25:09 imap2 dovecot: imap-login: Aborted login (auth
failed, 1 attempts in 2 secs): user=<[email protected]>, method=PLAIN,
rip=1.2.3.4, lip=9.8.7.6, TLS, TLSv1 with cipher DHE-RSA-AES256-SHA (256/256
bits)
:38 imap2 dovecot: pop3([email protected]): Disconnected: Logged out
top=0/0, retr=0/0, del=0/0, size=0
Jan 27 00:25:49 imap2 dovecot: pop3-login: Login: user=<[email protected]>,
method=PLAIN, rip=1.2.3.4, lip=9.8.7.6, mpid=12294, TLS, TLSv1 with cipher
ECDHE-RSA-AES256-SHA (256/256 bits)
Jan 27 00:25:49 imap2 dovecot: pop3([email protected]): Disconnected:
Logged out top=0/0, retr=0/0, del=0/0, size=0
Jan 27 01:29:28 imap2 dovecot: imap([email protected]): Disconnected:
Logged out in=392 out=1173
Jan 27 01:29:30 imap2 dovecot: imap-login: Login: user=<[email protected]>,
method=PLAIN, rip=1.2.3.4, lip=9.8.7.6, mpid=14921, TLS, TLSv1.2 with cipher
DHE-RSA-AES256-GCM-SHA384 (256/256 bits)
Jan 27 01:29:30 imap2 dovecot: imap([email protected]): Disconnected:
Logged out in=12 out=427
56-SHA (256/256 bits)
Jan 27 01:29:36 imap2 dovecot: pop3([email protected]): Disconnected:
Logged out top=0/0, retr=0/0, del=0/0, size=0
Jan 27 01:29:36 imap2 dovecot: pop3-login: Login: user=<[email protected]>,
method=PLAIN, rip=1.2.3.4, lip=9.8.7.6, mpid=14933, TLS, TLSv1 with cipher
ECDHE-RSA-AES256-SHA (256/256 bits)
Jan 27 01:29:37 imap2 dovecot: pop3([email protected]): Disconnected:
Logged out top=0/0, retr=0/0, del=0/0, size=0
Jan 27 01:39:41 imap2 dovecot: pop3([email protected]): Disconnected:
Logged out top=0/0, retr=0/0, del=0/0, size=0
Jan 27 01:39:41 imap2 dovecot: pop3-login: Login: user=<[email protected]>,
method=PLAIN, rip=1.2.3.4, lip=9.8.7.6, mpid=15322, TLS, TLSv1 with cipher
ECDHE-RSA-AES256-SHA (256/256 bits)
Jan 27 Jan 27 01:39:30 imap2 dovecot: imap-login: Login:
user=<[email protected]>, method=PLAIN, rip=1.2.3.4, lip=9.8.7.6, mpid=15310,
TLS, TLSv1.2 with cipher DHE-RSA-AES256-GCM-SHA384 (256/256 bits)
Jan 27 01:39:30 imap2 dovecot: imap([email protected]): Disconnected:
Logged out in=12 out=427
01:39:41 imap2 dovecot: pop3([email protected]): Disconnected: Logged out
top=0/0, retr=0/0, del=0/0, size=0
Jan 27 01:39:42 imap2 dovecot: pop3-login: Login: user=<[email protected]>,
method=PLAIN, rip=1.2.3.4, lip=9.8.7.6, mpid=15323, TLS, TLSv1 with cipher
ECDHE-RSA-AES256-SHA (256/256 bits)
Jan 27 01:39:42 imap2 dovecot: pop3([email protected]): Disconnected:
Logged out top=0/0, retr=0/0, del=0/0, size=0
Jan 27 02:03:34 imap2 dovecot: imap([email protected]): Disconnected:
Logged out in=370 out=1213
Jan 27 02:03:34 imap2 dovecot: imap([email protected]): Disconnected:
Logged out in=372 out=1215
)
Jan 27 02:03:42 imap2 dovecot: pop3([email protected]): Disconnected:
Logged out top=0/0, retr=0/0, del=0/0, size=0
Jan 27 02:03:43 imap2 dovecot: pop3-login: Login: user=<[email protected]>,
method=PLAIN, rip=1.2.3.4, lip=9.8.7.6, mpid=16417, TLS, TLSv1 with cipher
ECDHE-RSA-AES256-SHA (256/256 bits)
Jan 27 02:03:43 imap2 dovecot: pop3([email protected]): Disconnected:
Logged out top=0/0, retr=0/0, del
_______________________________________________
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of
sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE
THAT.
