Possible close connection issue

This is the place for developers to discuss bugs, new features and everything else about code changes.

Google Ads

Possible close connection issue

Postby ChristopheH » Tue Aug 30, 2016 10:10 am


I am working on finding the best rsyslog configuration for my env and I found out something weird.

I have a rsyslog 8.21 running on a client ( which sends logs to two remotes rsyslog 8.21 server ( and using imrelp/omrelp. Binaries are from the official repo.

When I shut one of them, the FIN/ACK begins but never ends.

Here's my tcpdump :
I shut rsyslogd on and it warns the client, but never fully close the connection

08:40:20.403046 IP > Flags [P.], seq 119:135, ack 239, win 434, options [nop,nop,TS val 945091672 ecr 599912227], length 16
08:40:20.403077 IP > Flags [.], ack 135, win 418, options [nop,nop,TS val 599988310 ecr 945091672], length 0
08:40:20.403093 IP > Flags [F.], seq 135, ack 239, win 434, options [nop,nop,TS val 945091672 ecr 599912227], length 0
08:40:20.442418 IP > Flags [.], ack 136, win 418, options [nop,nop,TS val 599988350 ecr 945091672], length 0

On the client, the connection stays in close_wait while the server is in fin_wait then fin_wait2
tcp 32 0 CLOSE_WAIT 29270/rsyslogd
tcp 0 0 FIN_WAIT2 -

After a while, the connection disappear from the connection table on my linux on the server side, while it stays in close_wait on the client

Then, I generate a log packet on the client

08:45:50.551775 IP > Flags [P.], seq 239:380, ack 136, win 418, options [nop,nop,TS val 600318459 ecr 945091672], length 141
08:45:50.552865 IP > Flags [R], seq 3727375552, win 0, length 0

And it tries to use the previous connection and get a RST.

I expect the connection to be fully closed and, when I generate a new log packet on the client, a new connection is setup before sending the log packet.

Any idea what is wrong ?
Posts: 2
Joined: Tue Aug 30, 2016 9:44 am

Urgent Question?

  • Pulling out your Hair?
  • Wasting Time and Money?
  • Deadline Approaching?

Google Ads

Return to Developer's Corner

Who is online

Users browsing this forum: No registered users and 0 guests