Information: Forum is in read-only mode
For details and other support options see

Possible close connection issue

This is the place for developers to discuss bugs, new features and everything else about code changes.

Moderator: alorbach

Google Ads

Possible close connection issue

Postby ChristopheH » Tue Aug 30, 2016 10:10 am


I am working on finding the best rsyslog configuration for my env and I found out something weird.

I have a rsyslog 8.21 running on a client ( which sends logs to two remotes rsyslog 8.21 server ( and using imrelp/omrelp. Binaries are from the official repo.

When I shut one of them, the FIN/ACK begins but never ends.

Here's my tcpdump :
I shut rsyslogd on and it warns the client, but never fully close the connection

08:40:20.403046 IP > Flags [P.], seq 119:135, ack 239, win 434, options [nop,nop,TS val 945091672 ecr 599912227], length 16
08:40:20.403077 IP > Flags [.], ack 135, win 418, options [nop,nop,TS val 599988310 ecr 945091672], length 0
08:40:20.403093 IP > Flags [F.], seq 135, ack 239, win 434, options [nop,nop,TS val 945091672 ecr 599912227], length 0
08:40:20.442418 IP > Flags [.], ack 136, win 418, options [nop,nop,TS val 599988350 ecr 945091672], length 0

On the client, the connection stays in close_wait while the server is in fin_wait then fin_wait2
tcp 32 0 CLOSE_WAIT 29270/rsyslogd
tcp 0 0 FIN_WAIT2 -

After a while, the connection disappear from the connection table on my linux on the server side, while it stays in close_wait on the client

Then, I generate a log packet on the client

08:45:50.551775 IP > Flags [P.], seq 239:380, ack 136, win 418, options [nop,nop,TS val 600318459 ecr 945091672], length 141
08:45:50.552865 IP > Flags [R], seq 3727375552, win 0, length 0

And it tries to use the previous connection and get a RST.

I expect the connection to be fully closed and, when I generate a new log packet on the client, a new connection is setup before sending the log packet.

Any idea what is wrong ?
Posts: 2
Joined: Tue Aug 30, 2016 9:44 am

Urgent Question?

  • Pulling out your Hair?
  • Wasting Time and Money?
  • Deadline Approaching?

Google Ads

Return to Developer's Corner

Who is online

Users browsing this forum: No registered users and 0 guests