You need to update to the current verson (8.38.0) first before I can
look at this.

Rainer
El jue., 11 oct. 2018 a las 15:32, Peter Viskup
(<skupko...@gmail.com>) escribió:
>
> Thank you Rainer,
> the Changelog answered why client is not answering keepalive packets
> (bug fixed in 8.18).
>
> What about the TCP session open&close on client side?
> This happen every 16 seconds in parallel with other TCP session opened
> and used for data transfer.
>
> Following is session export from pcap:
> "5606","316.433579","client","server","TCP","74","0x4da5
> (19877)","51112 → 1514 [SYN] Seq=0 Win=29200 Len=0 MSS=1460
> SACK_PERM=1 TSval=2136435442 TSecr=0 WS=128"
> "5612","316.702389","server","client","TCP","74","0x0000 (0)","1514 →
> 51112 [SYN, ACK] Seq=0 Ack=1 Win=28960 Len=0 MSS=1350 SACK_PERM=1
> TSval=339748485 TSecr=2136435442 WS=128"
> "5613","316.702472","client","server","TCP","66","0x4da6
> (19878)","51112 → 1514 [ACK] Seq=1 Ack=1 Win=29312 Len=0
> TSval=2136435509 TSecr=339748485"
> "5614","316.702562","client","server","TCP","66","0x4da7
> (19879)","51112 → 1514 [FIN, ACK] Seq=1 Ack=1 Win=29312 Len=0
> TSval=2136435509 TSecr=339748485"
> "5615","316.970442","server","client","TCP","66","0x39d7
> (14807)","1514 → 51112 [FIN, ACK] Seq=1 Ack=2 Win=29056 Len=0
> TSval=339748552 TSecr=2136435509"
> "5616","316.970503","client","server","TCP","66","0x4da8
> (19880)","51112 → 1514 [ACK] Seq=2 Ack=2 Win=29312 Len=0
> TSval=2136435576 TSecr=339748552"
>
> There are no data transferred.
>
> Peter
>
> On Thu, Oct 11, 2018 at 12:58 PM Rainer Gerhards
> <rgerha...@hq.adiscon.com> wrote:
> >
> > I did a quick search through the ChangeLog
> >
> > https://github.com/rsyslog/rsyslog/blob/master/ChangeLog
> >
> > and it shows ample changes since Dec 2015 (8.15). Have a look yourself.
> >
> > HTH
> > Rainer
_______________________________________________
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of 
sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE 
THAT.

Reply via email to