[logs] Error messages from syslogd

Balazs Scheidler bazsi at balabit.hu
Thu Jul 12 04:38:47 PDT 2007


On Wed, 2007-07-11 at 09:41 -0700, Tina Bird wrote:
> > Depends on the type of syslog installed wouldn't it? As in Linux
> > syslog would have different error messages than Solaris or AIX or
> > Ultrix. My first action would be to look at the source code for the
> > open ones... and then do a strings on the non-open ones for some
> > guesses.
> > 
> > Beyond that I do not have anything at the moment.

> I did scrounge up one more error in my own testbed after I sent my
> post last
> night:
> 
> Jun 18 03:05:00 <syslog.err> bettiepage syslogd: sendto: Host is down
> 
> which, when I thought about it, is the only error message from syslogd
> that
> I've *ever* seen. Obviously it's actionable, although since this is a
> vanilla syslogd running over UDP, I've never quite figured out how it
> manages to "know" that the remote host is unavailable...

ICMP host unreachable, or an incomplete routing table.

-- 
Bazsi


More information about the LogAnalysis mailing list