On Fri, Feb 14, 2014 at 9:52 AM, Steve <steve at thupdi.net> wrote: > Dig into the log, it's about 50 users in file, about 20 online. > Feb 13 23:26:20 (none) ocserv[16343]: IP7:51025 DTLS handshake > completed (plaintext MTU: 1290) > Feb 13 23:26:21 (none) ocserv[24422]: IP:40468 user 'user223AC' tried > to connect more than 5 times > Feb 13 23:26:21 (none) ocserv[24422]: IP:40468 failed authentication > attempt for user 'user223AC' > Feb 13 23:26:21 (none) ocserv[16342]: IP:40468 worker-auth.c:836: > failed authentication for '' > Feb 13 23:26:21 (none) ocserv[24422]: IP:40468 main-misc.c:464: > command socket closed > Feb 13 23:26:21 (none) ocserv[24422]: IP:40468 client disconnected, > became zombie > Feb 13 23:26:22 (none) ocserv[16351]: IP:36409 accepted connection > Feb 13 23:26:22 (none) kernel: [6765291.242694] ocserv-main[24422]: > segfault at 40 ip 0000000000419fee sp 00007fff446c6f00 error 4 in > ocserv[400000+2f000] Could you run: addr2line -e /usr/sbin/ocserv 0000000000419fee >> You should be able to redirect into a single file all ocserv's logs >> from your syslog facility. > Which syslog facility should I use? > You should be able to redirect into a single file all ocserv's logs > from your syslog facility. Your syslog program should have instructions on that. If you use rsyslog check: http://wiki.rsyslog.com/index.php/Filtering_by_program_name regards, Nikos
