Gentoo Forums
Gentoo Forums
Gentoo Forums
Quick Search: in
Dansguardian - Error connecting via ipc to log [SOLVED]
View unanswered posts
View posts from last 24 hours

 
Reply to topic    Gentoo Forums Forum Index Networking & Security
View previous topic :: View next topic  
Author Message
hanj
Veteran
Veteran


Joined: 19 Aug 2003
Posts: 1317

PostPosted: Mon Feb 18, 2008 3:11 pm    Post subject: Dansguardian - Error connecting via ipc to log [SOLVED] Reply with quote

Hello All

Just added Dansguardian to monitor my DMZ network and filter traffic. Everything is working great, but every night I'm seeing the following errors in messages:

Code:
Feb 18 06:01:11 comp dansguardian: Error connecting via ipc to log
Feb 18 06:10:33 comp dansguardian: Error connecting via ipc to url cache
Feb 18 06:10:33 comp dansguardian: Error connecting via ipc to url cache
Feb 18 06:10:33 comp dansguardian: Error connecting via ipc to log
Feb 18 06:31:48 comp dansguardian: Error connecting via ipc to url cache
Feb 18 06:31:48 comp dansguardian: Error connecting via ipc to log
Feb 18 06:34:42 comp dansguardian: Error connecting via ipc to url cache
Feb 18 06:34:42 comp dansguardian: Error connecting via ipc to url cache
Feb 18 06:34:42 comp dansguardian: Error connecting via ipc to log
Feb 18 06:40:33 comp dansguardian: Error connecting via ipc to url cache
Feb 18 06:40:33 comp dansguardian: Error connecting via ipc to url cache
Feb 18 06:40:33 comp dansguardian: Error connecting via ipc to log


These start at 3AMish and will continue until I restart Dans. That said, seems like it would be issue with logrotate, but I have Dansguardian logs and squid logs set to rotate weekly, and this happens every night.

Here is some system information:
Code:
[ebuild   R   ] net-proxy/dansguardian-2.8.0.6-r1  208 kB
[ebuild   R   ] net-proxy/squid-2.6.17  USE="pam ssl (-ipf-transparent) -ldap -logrotate -nis (-pf-transparent) -qos -samba -sasl (-selinux) -snmp -zero-penalty-hit" 1,685 kB


Kernel is : 2.6.23-hardened-r4

Here are my rotate scripts:

Code:
/var/log/dansguardian/access.log {
  rotate 4
  weekly
  missingok
  notifempty
  nocreate
  nocopy
  nocopytruncate
  nocompress

  postrotate
    /usr/sbin/dansguardian -r
  endscript
}

/var/log/squid/access.log {
        weekly
        rotate 5
        copytruncate
        compress
        notifempty
        missingok
}
/var/log/squid/cache.log {
        weekly
        rotate 5
        copytruncate
        compress
        notifempty
        missingok
}
/var/log/squid/store.log {
        weekly
        rotate 5
        copytruncate
        compress
        notifempty
        missingok
        # This script asks squid to rotate its logs on its own.
        # Restarting squid is a long process and it is not worth
        # doing it just to rotate logs
        postrotate
        /usr/sbin/squid -k rotate
        endscript
}


The 'Feb 18 06:01:11 comp dansguardian: Error connecting via ipc to log' error seems to be related to the fact that Dans cannot write to /var/log/dansguardian/access_log. Opening that log file, I see the last entry at 3:10AM. Like I said, I restart Dans.. and everything is fine.. until later tonight.

Any ideas??

Thanks!
hanji
_________________
Server Admin Blog - Uno-Code.com | Gentoo Hosting at Rackspace!


Last edited by hanj on Tue Nov 11, 2008 5:23 pm; edited 1 time in total
Back to top
View user's profile Send private message
hanj
Veteran
Veteran


Joined: 19 Aug 2003
Posts: 1317

PostPosted: Wed Feb 20, 2008 1:51 pm    Post subject: Reply with quote

anyone? anyone? I'm not finding very much relevant info on the subject.

Thanks!
hanji
_________________
Server Admin Blog - Uno-Code.com | Gentoo Hosting at Rackspace!
Back to top
View user's profile Send private message
hanj
Veteran
Veteran


Joined: 19 Aug 2003
Posts: 1317

PostPosted: Tue Nov 11, 2008 5:23 pm    Post subject: Reply with quote

I finally understood the problem. I use tmpreaper to clean out my /tmp directory on a daily basis. It was deleting my .dguardianipc and .dguardianurlipc sockets in there.

Code:
srwxr-xr-x  1 nobody nobody   0 Nov 11 10:12 .dguardianipc
srwxr-xr-x  1 nobody nobody   0 Nov 11 10:12 .dguardianurlipc


I simply adjusted my tmpreaper to exclude those.

Code:
tmpreaper --all 1d --mtime --force --protect '.dguardian*' /tmp


All is better now.

Thanks!
hanji
_________________
Server Admin Blog - Uno-Code.com | Gentoo Hosting at Rackspace!
Back to top
View user's profile Send private message
Display posts from previous:   
Reply to topic    Gentoo Forums Forum Index Networking & Security All times are GMT
Page 1 of 1

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum