dhcpd stops logging

[Glenn Satchell]

>X-Original-To: dhcp-users at webster.isc.org
>From: Tina Siegenthaler <tina at zool.unizh.ch>
>Subject: Re: dhcpd stops logging
>Date: Mon, 18 Dec 2006 15:37:05 +0100
>To: dhcp-users at isc.org
>X-Virus-Scanned: amavisd-new at unizh.ch
>X-archive-position: 2496
>X-ecartis-version: Ecartis v1.0.0
>X-original-sender: tina at zool.unizh.ch
>List-software: Ecartis version 1.0.0
>X-List-ID: <dhcp-users.isc.org>
>X-list: dhcp-users
>
>
>Am 06.12.2006 um 19:49 schrieb Tina Siegenthaler:
>
>>
>> Am 06.12.2006 um 12:47 schrieb Glenn Satchell:
>>
>>>
>>>> To: dhcp-users at isc.org
>>>> From: Tina Siegenthaler <tina at zool.unizh.ch>
>>>> Subject: dhcpd stops logging
>>>> Date: Wed, 6 Dec 2006 12:03:14 +0100
>>>>
>>>> Hi list
>>>>
>>>> Sometimes, my dhcp server just stops logging, without any reason
>>>> (well, at least I found no reason). I'm running dhcpd 3.0.4 on  
>>>> Mac OS
>>>> X (10.4.8). I added this statement to my dhcpd.conf file:
>>>>
>>>> log-facility local1;
>>>>
>>>> and I added the following line to syslog.conf:
>>>>
>>>> local1.*              /var/log/dhcp.log
>>>>
>>>> Usually, this works fine, but then, all of a sudden, I find that
>>>> there are no new log entries made in dhcp.log. I haven't found out
>>>> whether it is syslogd that stops accepting the log messages, or
>>>> whether dhcpd stops sending them. If I restart both syslogd and
>>>> dhcpd, the messages get logged again.
>>>> This is rather annoying, since we are supposed to archive all leases
>>>> for the last 6 months, and now I sometimes get gaps of some hours in
>>>> the log.
>>>>
>>>> Any ideas? I was thinking about restarting syslogd and dhcpd every
>>>> hour with cron or so, but this seems rather brute force...
>>>
>>> Next time it stops, if clients are still able to get an address via
>>> DHCP, try restarting only syslog and see if the messages come back.
>>> Then try restarting dhcpd if necessary. This is not a common problem,
>>> so is more likely to be syslogd.
>>>
>>> regards,
>>> -glenn
>>>
>>
>
>OK, I did so and it didn't help. Only after I also restarted dhcpd,  
>the log messages were written again. Ideas? It's really annoying.

Does it always happen at a certain time of day? If so are there any
cron jobs that run at that time?

Does syslog stop logging to other files at the same time?

Are there any syslog patches for your system that aren't installed?

regards,
-glenn