Mailing List Archive: Error message in message logs and systemctl status rsyslogd

Hi,
I am seeing lots of messages as following in message logs and “systemctl status rsyslog.service” on my syslog server, my question is this will affect the performance or potentially case issues?

# systemctl status rsyslog.service
? rsyslog.service - System Logging Service
Loaded: loaded (/usr/lib/systemd/system/rsyslog.service; enabled; vendor preset: enabled)
Active: active (running) since Sat 2020-07-25 11:24:49 PDT; 11min ago
Docs: man:rsyslogd(8)
http://www.rsyslog.com/doc/
Main PID: 1037 (rsyslogd)
CGroup: /system.slice/rsyslog.service
??1037 /usr/sbin/rsyslogd -n

Jul 25 11:36:40 rsyslogd[1037]: unexpected GnuTLS error -110 in nsd_gtls.c:536: The TLS connection was non-properly terminated. ...e/2078 ]
Jul 25 11:36:40 rsyslogd[1037]: netstream session 0x7f29a425a060 from ***.***.***.*** will be closed due to error [v8.24.0-34.el7 t...e/2078 ]
Jul 25 11:36:42 rsyslogd[1037]: unexpected GnuTLS error -110 in nsd_gtls.c:536: The TLS connection was non-properly terminated. ...e/2078 ]
Jul 25 11:36:42 rsyslogd[1037]: netstream session 0x7f29a4174ff0 from ***.***.***.***will be closed due to error [v8.24.0-34.el7...e/2078 ]
Jul 25 11:36:42 rsyslogd[1037]: unexpected GnuTLS error -110 in nsd_gtls.c:536: The TLS connection was non-properly terminated. ...e/2078 ]
Jul 25 11:36:42 rsyslogd[1037]: netstream session 0x7f29a4116cd0 from ***.***.***.*** will be closed due to error [v8.24.0-34.el7 ...e/2078 ]
Jul 25 11:36:42 rsyslogd[1037]: unexpected GnuTLS error -110 in nsd_gtls.c:536: The TLS connection was non-properly terminated. ...e/2078 ]
Jul 25 11:36:42 rsyslogd[1037]: netstream session 0x7f29a45e1190 from ***.***.***.***will be closed due to error [v8.24.0-34.el7 ...e/2078 ]
Jul 25 11:36:43 rsyslogd[1037]: unexpected GnuTLS error -110 in nsd_gtls.c:536: The TLS connection was non-properly terminated. ...e/2078 ]
Jul 25 11:36:43 rsyslogd[1037]: netstream session 0x7f29a404ea00 from ***.***.***.***will be closed due to error [v8.24.0-34.el7 ...e/2078 ]
Hint: Some lines were ellipsized, use -l to show in full.

Thanks.

-Ren
_______________________________________________
rsyslog mailing list
https://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE THAT.

Hi Ren,
seems FW or some other device invalidated/closed the connection. It could
happen when no data is sent within configured timeout.
Make sure to have TCP KeepAlive enabled on both sides (including OS and
rsyslog omfwd/im[p]tcp settings).
That might help.

Peter

On Sat, Jul 25, 2020 at 8:43 PM Ren You via rsyslog <
rsyslog@lists.adiscon.com> wrote:

> Hi,
> I am seeing lots of messages as following in message logs and “systemctl
> status rsyslog.service” on my syslog server, my question is this will
> affect the performance or potentially case issues?
>
> # systemctl status rsyslog.service
> ? rsyslog.service - System Logging Service
> Loaded: loaded (/usr/lib/systemd/system/rsyslog.service; enabled;
> vendor preset: enabled)
> Active: active (running) since Sat 2020-07-25 11:24:49 PDT; 11min ago
> Docs: man:rsyslogd(8)
> http://www.rsyslog.com/doc/
> Main PID: 1037 (rsyslogd)
> CGroup: /system.slice/rsyslog.service
> ??1037 /usr/sbin/rsyslogd -n
>
> Jul 25 11:36:40 rsyslogd[1037]: unexpected GnuTLS error -110 in
> nsd_gtls.c:536: The TLS connection was non-properly terminated. ...e/2078 ]
> Jul 25 11:36:40 rsyslogd[1037]: netstream session 0x7f29a425a060 from
> ***.***.***.*** will be closed due to error [v8.24.0-34.el7 t...e/2078 ]
> Jul 25 11:36:42 rsyslogd[1037]: unexpected GnuTLS error -110 in
> nsd_gtls.c:536: The TLS connection was non-properly terminated. ...e/2078 ]
> Jul 25 11:36:42 rsyslogd[1037]: netstream session 0x7f29a4174ff0 from
> ***.***.***.***will be closed due to error [v8.24.0-34.el7...e/2078 ]
> Jul 25 11:36:42 rsyslogd[1037]: unexpected GnuTLS error -110 in
> nsd_gtls.c:536: The TLS connection was non-properly terminated. ...e/2078 ]
> Jul 25 11:36:42 rsyslogd[1037]: netstream session 0x7f29a4116cd0 from
> ***.***.***.*** will be closed due to error [v8.24.0-34.el7 ...e/2078 ]
> Jul 25 11:36:42 rsyslogd[1037]: unexpected GnuTLS error -110 in
> nsd_gtls.c:536: The TLS connection was non-properly terminated. ...e/2078 ]
> Jul 25 11:36:42 rsyslogd[1037]: netstream session 0x7f29a45e1190 from
> ***.***.***.***will be closed due to error [v8.24.0-34.el7 ...e/2078 ]
> Jul 25 11:36:43 rsyslogd[1037]: unexpected GnuTLS error -110 in
> nsd_gtls.c:536: The TLS connection was non-properly terminated. ...e/2078 ]
> Jul 25 11:36:43 rsyslogd[1037]: netstream session 0x7f29a404ea00 from
> ***.***.***.***will be closed due to error [v8.24.0-34.el7 ...e/2078 ]
> Hint: Some lines were ellipsized, use -l to show in full.
>
>
>
>
>
> Thanks.
>
>
>
> -Ren
> _______________________________________________
> rsyslog mailing list
> https://lists.adiscon.net/mailman/listinfo/rsyslog
> http://www.rsyslog.com/professional-services/
> What's up with rsyslog? Follow https://twitter.com/rgerhards
> NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad
> of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you
> DON'T LIKE THAT.
_______________________________________________
rsyslog mailing list
https://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE THAT.