[rsyslog-notify] Forum Thread: Re: RSyslog not sending messages - (Mode 'reply')

[noreply at adiscon.com]

User: lethalduck 
Forumlink: http://kb.monitorware.com/viewtopic.php?p=25214#p25214

Message: 
----------
[quote:1vczjghy]in the bug that Rainer created there are instructions on
how to enable more verbose debugging from GnuTLS. Can you compile rsyslog
yourself with this enabled?[/quote:1vczjghy]

The server is a production box and I don't have another exactly the same to
build on. I really wanted to avoid installing development tools on the
production box if I could. I'm also unsure of how the process should
work... transitioning from a repository package-set to a manually built
one. My guess is this may introduce more issues.

[quote:1vczjghy]as for where stderr is going, if the system runs it, it
will frequently have stderr redirected to /dev/null

If you run rsyslog manually as root, you should see stderr and
stdout[/quote:1vczjghy]

I've been running rsyslog manually as root, but not seeing any gnutls
errors. In some cases the ssh session is terminated imediatly after the
gnutls fault.
The gnutls mailing list asked if my rsyslog was linked with gnutls 3.3.x. I
don't see any sine of it with a lld and there is no gnutls3 specific
package installed as per my previous listing, but obviously rsyslog is
using gnutls, so I'm a bit confused there.

[quote:1vczjghy]here are some instructions on using wireshark to decrypt
traffic[/quote:1vczjghy]

Cheers. I went through those ones a few hours ago along with a stack of
others. It just doesn't seem to decrypt the capture.