You need to update to the current verson (8.38.0) first before I can look at this.
Rainer El jue., 11 oct. 2018 a las 15:32, Peter Viskup (<skupko...@gmail.com>) escribió: > > Thank you Rainer, > the Changelog answered why client is not answering keepalive packets > (bug fixed in 8.18). > > What about the TCP session open&close on client side? > This happen every 16 seconds in parallel with other TCP session opened > and used for data transfer. > > Following is session export from pcap: > "5606","316.433579","client","server","TCP","74","0x4da5 > (19877)","51112 → 1514 [SYN] Seq=0 Win=29200 Len=0 MSS=1460 > SACK_PERM=1 TSval=2136435442 TSecr=0 WS=128" > "5612","316.702389","server","client","TCP","74","0x0000 (0)","1514 → > 51112 [SYN, ACK] Seq=0 Ack=1 Win=28960 Len=0 MSS=1350 SACK_PERM=1 > TSval=339748485 TSecr=2136435442 WS=128" > "5613","316.702472","client","server","TCP","66","0x4da6 > (19878)","51112 → 1514 [ACK] Seq=1 Ack=1 Win=29312 Len=0 > TSval=2136435509 TSecr=339748485" > "5614","316.702562","client","server","TCP","66","0x4da7 > (19879)","51112 → 1514 [FIN, ACK] Seq=1 Ack=1 Win=29312 Len=0 > TSval=2136435509 TSecr=339748485" > "5615","316.970442","server","client","TCP","66","0x39d7 > (14807)","1514 → 51112 [FIN, ACK] Seq=1 Ack=2 Win=29056 Len=0 > TSval=339748552 TSecr=2136435509" > "5616","316.970503","client","server","TCP","66","0x4da8 > (19880)","51112 → 1514 [ACK] Seq=2 Ack=2 Win=29312 Len=0 > TSval=2136435576 TSecr=339748552" > > There are no data transferred. > > Peter > > On Thu, Oct 11, 2018 at 12:58 PM Rainer Gerhards > <rgerha...@hq.adiscon.com> wrote: > > > > I did a quick search through the ChangeLog > > > > https://github.com/rsyslog/rsyslog/blob/master/ChangeLog > > > > and it shows ample changes since Dec 2015 (8.15). Have a look yourself. > > > > HTH > > Rainer _______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com/professional-services/ What's up with rsyslog? Follow https://twitter.com/rgerhards NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE THAT.