On Wed, 27 Jan 2016, Thomas D. wrote:
Hi,on Debian Jessie with rsyslog-8.4.2-1+deb8u2 I am experiencing truncated/mixed log messages. Please see the attached anonymized log sample: Line 5: - Hostname (imap2) truncated (probably the whole following message is lost) - New message starts in the truncated one Line 7: - Message starts without a date? - Maybe this is the truncated message from line 5? Line 13/19: - Same like 5 and 7? Line 27/29: - Same like 5 and7? Line 34/35: - Same like 5 and7? Line 41: - Not sure where this line started, but this is just a selection from the log file, maybe I missed that line. ... From "/etc/rsyslog.d/40-sep-mail.conf":if $syslogfacility-text == 'mail' then { if $programname == 'dovecot' then { if $msg startswith ' pop3' then { action( type="omfile" File="/var/log/dovecot.log" FileOwner="root" FileGroup="adm" asyncWriting="on" flushInterval="30" ) stop } else if $msg startswith ' imap' then { action( type="omfile" File="/var/log/dovecot.log" FileOwner="root" FileGroup="adm" asyncWriting="on" flushInterval="30" ) stop } }In "/etc/rsyslog.d/50-default.conf" I am logging the remaining mail.* messages, also asynchronous,mail.* action( type="omfile" File="/var/log/mail.log" FileOwner="root" FileGroup="adm" asyncWriting="on" flushInterval="30" )but I haven't seen any corrupt message yet in "mail.log" like I have seen in "dovecot.log". I have now turned off "asyncWriting" for "dovecot.log" for testing. Is this normal or a known (fixed) bug?
There are some known bugs that have been fixed that could affect this. I also have found asyncWriting to be a problem recently, but have not yet worked to track down the problem
David Lang
PS: Any chance to get a recent rsyslog for Debian Jessie (https://github.com/rsyslog/rsyslog-pkg-debian/issues/5)? Don't want to pull in from testing/sid. -Thomas
Jan 27 00:09:41 imap2 dovecot: pop3([email protected]): Disconnected: Logged out top=0/0, retr=0/0, del=0/0, size=0 Jan 27 00:09:41 imap2 dovecot: pop3-login: Login: user=<[email protected]>, method=PLAIN, rip=1.2.3.4, lip=9.8.7.6, mpid=8858, TLS, TLSv1 with cipher ECDHE-RSA-AES256-SHA (256/256 bits) Jan 27 00:09:41 imap2 dovecot: pop3([email protected]): Disconnected: Logged out top=0/0, retr=0/0, del=0/0, size=0 Jan 27 00:09:41 imap2 dovecot: pop3-login: Login: user=<[email protected]>, method=PLAIN, rip=1.2.3.4, lip=9.8.7.6, mpid=8859, TLS, TLSv1 with cipher ECDHE-RSA-AES256-SHA (256/256 bits) Jan 27 00:09:41 imapJan 27 00:09:31 imap2 dovecot: imap-login: Login: user=<[email protected]>, method=PLAIN, rip=1.2.3.4, lip=9.8.7.6, mpid=8845, TLS, TLSv1.2 with cipher DHE-RSA-AES256-GCM-SHA384 (256/256 bits) Jan 27 00:09:31 imap2 dovecot: imap([email protected]): Disconnected: Logged out in=12 out=427 2 dovecot: pop3([email protected]): Disconnected: Logged out top=0/0, retr=0/0, del=0/0, size=0 Jan 27 00:09:41 imap2 dovecot: pop3-login: Login: user=<[email protected]>, method=PLAIN, rip=1.2.3.4, lip=9.8.7.6, mpid=8860, TLS, TLSv1 with cipher ECDHE-RSA-AES256-SHA (256/256 bits) Jan 27 00:09:41 imap2 dovecot: pop3([email protected]): Disconnected: Logged out top=0/0, retr=0/0, del=0/0, size=0 Jan 27 00:15:33 imap2 dovecot: pop3([email protected]): Disconnected: Logged out top=0/0, retr=0/0, del=0/0, size=0 Jan 27 00:15:33 imap2 dovecot: pop3-login: Login: user=<[email protected]>, method=PLAIN, rip=1.2.3.4, lip=9.8.7.6, mpid=11840, TLS, TLSv1 with cipher ECDHE-RSA-AES256-SHA (256/256 bits) Jan 27 00:15:33 imap2 dovecot: pop3([email protected]): Disconnected: Logged out top=0/0, retr=0/0, del=0/0, size=0 Jan 27Jan 27 00:15:28 imap2 dovecot: imap-login: Login: user=<[email protected]>, method=PLAIN, rip=1.2.3.4, lip=9.8.7.6, mpid=11826, TLS, TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits) Jan 27 00:15:28 imap2 dovecot: imap-login: Login: user=<[email protected]>, method=PLAIN, rip=1.2.3.4, lip=9.8.7.6, mpid=11827, TLS, TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits) Jan 27 00:15:28 imap2 dovecot: imap([email protected]): ID sent: name=iPhone Mail, version=13D15, os=iOS, os-version=9.2.1 (13D15) Jan 27 00:15:28 imap2 dovecot: imap([email protected]): ID sent: name=iPhone Mail, version=13D15, os=iOS, os-version=9.2.1 (13D15) Jan 27 00:15:29 imap2 dovecot: imap-login: Login: user=<[email protected]>, method=PLAIN, rip=1.2.3.4, lip=9.8.7.6, mpid=11828, TLS, TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits) Jan 27 00:15:29 imap2 dovecot: imap([email protected]): ID sent: name=iPhone Mail, version=13D15, os=iOS, os-version=9.2.1 (13D15) 00:15:33 imap2 dovecot: pop3-login: Login: user=<[email protected]>, method=PLAIN, rip=1.2.3.4, lip=9.8.7.6, mpid=11841, TLS, TLSv1 with cipher ECDHE-RSA-AES256-SHA (256/256 bits) Jan 27 00:15:34 imap2 dovecot: pop3([email protected]): Disconnected: Logged out top=0/0, retr=0/0, del=0/0, size=0 Jan 27 00:15:55 imap2 dovecot: pop3-login: Login: user=<[email protected]>, method=PLAIN, rip=1.2.3.4, lip=9.8.7.6, mpid=11895, TLS, TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits) Jan 27 00:15:55 imap2 dovecot: pop3([email protected]): Disconnected: Logged out top=0/0, retr=0/0, del=0/0, size=0 Jan 27 00:16:48 imap2 dovecot: pop3-login: Login: user=<[email protected]>, method=PLAIN, rip=1.2.3.4, lip=9.8.7.6, mpid=11915, TLS, TLSv1 with cipher ECDHE-RSA-AES256-SHA (256/256 bits) Jan 27 00:16:49 imap2 dovecot: pop3([email protected]): Disconnected: Logged out top=0/0, retr=0/0, del=0/0, size=0 Jan 27 00:19:35 imap2 dovecot: pop3([email protected]): Disconnected: Logged out top=0/0, retr=0/0, del=0/0, size=0 Jan 27 00:19:35 imap2 dovecot: pop3-login: Login: user=<[email protected]>, method=PLAIN, rip=1.2.3.4, lip=9.8.7.6, mpid=11992, TLS, TLSv1 with cipher ECDHE-RSA-AES256-SHA (256/256 bits) Jan 27 Jan 27 00:19:32 imap2 dovecot: imap-login: Login: user=<[email protected]>, method=PLAIN, rip=1.2.3.4, lip=9.8.7.6, mpid=11982, TLS, TLSv1.2 with cipher DHE-RSA-AES256-GCM-SHA384 (256/256 bits) Jan 27 00:19:33 imap2 dovecot: imap([email protected]): Disconnected: Logged out in=12 out=427 00:19:35 imap2 dovecot: pop3([email protected]): Disconnected: Logged out top=0/0, retr=0/0, del=0/0, size=0 Jan 27 00:19:35 imap2 dovecot: pop3-login: Login: user=<[email protected]>, method=PLAIN, rip=1.2.3.4, lip=9.8.7.6, mpid=11993, TLS, TLSv1 with cipher ECDHE-RSA-AES256-SHA (256/256 bits) Jan 27 00:19:35 imap2 dovecot: pop3([email protected]): Disconnected: Logged out top=0/0, retr=0/0, del=0/0, size=0 Jan 27 00:25:38 imap2 dovecot: pop3([email protected]): Disconnected: Logged out top=0/0, retr=0/0, del=0/0, size=0 Jan 27 00:25:38 imap2 dovecot: pop3-login: Login: user=<[email protected]>, method=PLAIN, rip=1.2.3.4, lip=9.8.7.6, mpid=12285, TLS, TLSv1 with cipher ECDHE-RSA-AES256-SHA (256/256 bits) Jan 27 00:25Jan 27 00:25:09 imap2 dovecot: imap-login: Aborted login (auth failed, 1 attempts in 2 secs): user=<[email protected]>, method=PLAIN, rip=1.2.3.4, lip=9.8.7.6, TLS, TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits) :38 imap2 dovecot: pop3([email protected]): Disconnected: Logged out top=0/0, retr=0/0, del=0/0, size=0 Jan 27 00:25:49 imap2 dovecot: pop3-login: Login: user=<[email protected]>, method=PLAIN, rip=1.2.3.4, lip=9.8.7.6, mpid=12294, TLS, TLSv1 with cipher ECDHE-RSA-AES256-SHA (256/256 bits) Jan 27 00:25:49 imap2 dovecot: pop3([email protected]): Disconnected: Logged out top=0/0, retr=0/0, del=0/0, size=0 Jan 27 01:29:28 imap2 dovecot: imap([email protected]): Disconnected: Logged out in=392 out=1173 Jan 27 01:29:30 imap2 dovecot: imap-login: Login: user=<[email protected]>, method=PLAIN, rip=1.2.3.4, lip=9.8.7.6, mpid=14921, TLS, TLSv1.2 with cipher DHE-RSA-AES256-GCM-SHA384 (256/256 bits) Jan 27 01:29:30 imap2 dovecot: imap([email protected]): Disconnected: Logged out in=12 out=427 56-SHA (256/256 bits) Jan 27 01:29:36 imap2 dovecot: pop3([email protected]): Disconnected: Logged out top=0/0, retr=0/0, del=0/0, size=0 Jan 27 01:29:36 imap2 dovecot: pop3-login: Login: user=<[email protected]>, method=PLAIN, rip=1.2.3.4, lip=9.8.7.6, mpid=14933, TLS, TLSv1 with cipher ECDHE-RSA-AES256-SHA (256/256 bits) Jan 27 01:29:37 imap2 dovecot: pop3([email protected]): Disconnected: Logged out top=0/0, retr=0/0, del=0/0, size=0 Jan 27 01:39:41 imap2 dovecot: pop3([email protected]): Disconnected: Logged out top=0/0, retr=0/0, del=0/0, size=0 Jan 27 01:39:41 imap2 dovecot: pop3-login: Login: user=<[email protected]>, method=PLAIN, rip=1.2.3.4, lip=9.8.7.6, mpid=15322, TLS, TLSv1 with cipher ECDHE-RSA-AES256-SHA (256/256 bits) Jan 27 Jan 27 01:39:30 imap2 dovecot: imap-login: Login: user=<[email protected]>, method=PLAIN, rip=1.2.3.4, lip=9.8.7.6, mpid=15310, TLS, TLSv1.2 with cipher DHE-RSA-AES256-GCM-SHA384 (256/256 bits) Jan 27 01:39:30 imap2 dovecot: imap([email protected]): Disconnected: Logged out in=12 out=427 01:39:41 imap2 dovecot: pop3([email protected]): Disconnected: Logged out top=0/0, retr=0/0, del=0/0, size=0 Jan 27 01:39:42 imap2 dovecot: pop3-login: Login: user=<[email protected]>, method=PLAIN, rip=1.2.3.4, lip=9.8.7.6, mpid=15323, TLS, TLSv1 with cipher ECDHE-RSA-AES256-SHA (256/256 bits) Jan 27 01:39:42 imap2 dovecot: pop3([email protected]): Disconnected: Logged out top=0/0, retr=0/0, del=0/0, size=0 Jan 27 02:03:34 imap2 dovecot: imap([email protected]): Disconnected: Logged out in=370 out=1213 Jan 27 02:03:34 imap2 dovecot: imap([email protected]): Disconnected: Logged out in=372 out=1215 ) Jan 27 02:03:42 imap2 dovecot: pop3([email protected]): Disconnected: Logged out top=0/0, retr=0/0, del=0/0, size=0 Jan 27 02:03:43 imap2 dovecot: pop3-login: Login: user=<[email protected]>, method=PLAIN, rip=1.2.3.4, lip=9.8.7.6, mpid=16417, TLS, TLSv1 with cipher ECDHE-RSA-AES256-SHA (256/256 bits) Jan 27 02:03:43 imap2 dovecot: pop3([email protected]): Disconnected: Logged out top=0/0, retr=0/0, del
_______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com/professional-services/ What's up with rsyslog? Follow https://twitter.com/rgerhards NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE THAT.
_______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com/professional-services/ What's up with rsyslog? Follow https://twitter.com/rgerhards NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE THAT.
