MonitorWare Knowledge Base

We installed and configured the Rsyslog,and it is running well.

Now i want to transport the messages with the stunnel.But during the configuring,the stunnel is not work well.Some infomation undering:

Server:Fedora 5
[root@localhost ~]# stunnel
2008.05.15 11:44:00 LOG7[2626:3086050992]: Snagged 64 random bytes from /root/.rnd
2008.05.15 11:44:00 LOG7[2626:3086050992]: Wrote 1024 new random bytes to /root/.rnd
2008.05.15 11:44:00 LOG7[2626:3086050992]: RAND_status claims sufficient entropy for the PRNG
2008.05.15 11:44:00 LOG7[2626:3086050992]: PRNG seeded successfully
2008.05.15 11:44:00 LOG7[2626:3086050992]: Certificate: /usr/local/etc/stunnel/stunnel.pem
2008.05.15 11:44:00 LOG7[2626:3086050992]: Certificate loaded
2008.05.15 11:44:00 LOG7[2626:3086050992]: Key file: /usr/local/etc/stunnel/stunnel.pem
2008.05.15 11:44:00 LOG7[2626:3086050992]: Private key loaded
2008.05.15 11:44:00 LOG7[2626:3086050992]: SSL context initialized for service ssyslog

Client:Fedora 5

[root@localhost ~]# stunnel
2008.05.15 11:45:34 LOG7[11162:3086341808]: Snagged 64 random bytes from /root/.rnd
2008.05.15 11:45:34 LOG7[11162:3086341808]: Wrote 1024 new random bytes to /root/.rnd
2008.05.15 11:45:34 LOG7[11162:3086341808]: RAND_status claims sufficient entropy for the PRNG
2008.05.15 11:45:34 LOG7[11162:3086341808]: PRNG seeded successfully
2008.05.15 11:45:34 LOG7[11162:3086341808]: SSL context initialized for service ssyslog
2008.05.15 11:45:34 LOG5[11162:3086341808]: stunnel 4.21 on i686-pc-linux-gnu with OpenSSL 0.9.8a 11 Oct 2005
2008.05.15 11:45:34 LOG5[11162:3086341808]: Threading:PTHREAD SSL:ENGINE Sockets:POLL,IPv6 Auth:LIBWRAP
2008.05.15 11:45:34 LOG6[11162:3086341808]: file ulimit = 1024 (can be changed with 'ulimit -n')
2008.05.15 11:45:34 LOG6[11162:3086341808]: poll() used - no FD_SETSIZE limit for file descriptors
2008.05.15 11:45:34 LOG5[11162:3086341808]: 500 clients allowed
2008.05.15 11:45:34 LOG7[11162:3086341808]: FD 8 in non-blocking mode
2008.05.15 11:45:34 LOG7[11162:3086341808]: FD 9 in non-blocking mode
2008.05.15 11:45:34 LOG7[11162:3086341808]: FD 10 in non-blocking mode
2008.05.15 11:45:34 LOG7[11162:3086341808]: SO_REUSEADDR option set on accept socket
2008.05.15 11:45:34 LOG3[11162:3086341808]: Error binding ssyslog to 25.20.188.231:61514
2008.05.15 11:45:34 LOG3[11162:3086341808]: bind: Address already in use (98)


I don't know why ?"Address already in use?"

• Custom written rsyslog.conf?
• Maintenance Contract?
• Installation support?

Sorry, I overlooked the message. This looks like a duplicate port used. Please post your rsyslog and stunnel config files.

Thanks,
Rainer

rsyslog.conf/client:
...
*.* @@127.0.0.1:61514


rsyslog.conf/server

# Options to syslogd
# -m 0 disables 'MARK' messages.
# -r enables logging from remote machines
# -x disables DNS lookups on messages recieved with -r
# See syslogd(8) for more details
SYSLOGD_OPTIONS="-m 0 -r60514 -t61514"
# Options to klogd
# -2 prints all kernel oops messages twice; once for klogd to decode, and
# once for processing with 'ksymoops'
# -x disables all klogd processing of oops messages entirely
# See klogd(8) for more details
KLOGD_OPTIONS="-x"

the stunnel configure is followed by your document.