Process dead and log file

[Nikos Mavrogiannopoulos]

On Fri, Feb 14, 2014 at 9:52 AM, Steve <steve at thupdi.net> wrote:
> Dig into the log, it's about 50 users in file, about 20 online.
> Feb 13 23:26:20 (none) ocserv[16343]: IP7:51025 DTLS handshake
> completed (plaintext MTU: 1290)
> Feb 13 23:26:21 (none) ocserv[24422]: IP:40468 user 'user223AC' tried
> to connect more than 5 times
> Feb 13 23:26:21 (none) ocserv[24422]: IP:40468 failed authentication
> attempt for user 'user223AC'
> Feb 13 23:26:21 (none) ocserv[16342]: IP:40468 worker-auth.c:836:
> failed authentication for ''
> Feb 13 23:26:21 (none) ocserv[24422]: IP:40468 main-misc.c:464:
> command socket closed
> Feb 13 23:26:21 (none) ocserv[24422]: IP:40468 client disconnected,
> became zombie
> Feb 13 23:26:22 (none) ocserv[16351]: IP:36409 accepted connection
> Feb 13 23:26:22 (none) kernel: [6765291.242694] ocserv-main[24422]:
> segfault at 40 ip 0000000000419fee sp 00007fff446c6f00 error 4 in
> ocserv[400000+2f000]

Could you run:
addr2line -e /usr/sbin/ocserv 0000000000419fee

>> You should be able to redirect into a single file all ocserv's logs
>> from your syslog facility.
> Which syslog facility should I use?
> You should be able to redirect into a single file all ocserv's logs
> from your syslog facility.

Your syslog program should have instructions on that. If you use rsyslog check:
http://wiki.rsyslog.com/index.php/Filtering_by_program_name


regards,
Nikos