Hello,
I have 6100s and 6300s that I just upgraded to 10.10.1000 from some 10.09 release.
Since then, I have 2 new problems, across all 6100s and 6300s.
First problem is NTP log spam. Following report is from a 6300 (copy-pasted from a remote syslog server):
Sep 5 19:53:45 cx632 ntp-mgrd[4655] Event|1106|LOG_INFO|||NTP primary server connection lost to 10.1.1.41
Sep 5 19:53:45 cx632 ntp-mgrd[4655] Event|1105|LOG_INFO|||NTP primary server connection established to 10.1.1.41
Sep 5 19:53:56 cx632 ntp-mgrd[4655] Event|1106|LOG_INFO|||NTP primary server connection lost to 10.1.1.41
Sep 5 19:53:56 cx632 ntp-mgrd[4655] Event|1105|LOG_INFO|||NTP primary server connection established to 10.1.1.41
Sep 5 19:54:06 cx632 ntp-mgrd[4655] Event|1106|LOG_INFO|||NTP primary server connection lost to 10.1.1.41
Sep 5 19:54:06 cx632 ntp-mgrd[4655] Event|1105|LOG_INFO|||NTP primary server connection established to 10.1.1.41
So I ran tcpdump on the ntp server and the only relevant traffic is a request/reply every ~64s, while the switch logs a connection lost/established event pair every ~10s. It makes no sense, as the switch report a connection lost/established pair while no traffic is even exchanged with the ntp server!
Relevant config:
ntp server 10.1.1.41 minpoll 4 maxpoll 7 iburst prefer
ntp server 10.1.1.42 minpoll 4 maxpoll 7 iburst
ntp server pool.ntp.org minpoll 4 maxpoll 8 iburst
ntp server redacted1 minpoll 4 maxpoll 7 iburst
ntp server redacted2 minpoll 4 maxpoll 7 iburst
ntp server redacted3 minpoll 4 maxpoll 7 iburst
ntp server redacted4 minpoll 4 maxpoll 7 iburst
The other problem, may be related or not:
Sep 5 19:58:32 cx632 log-mgmtd[3245] Event|1231|LOG_INFO|CDTR|1|Syslog client restarted due to configuration change.
Sep 5 19:58:33 cx632 log-proxyd[770] Event|1233|LOG_INFO|CDTR|1|Starting System Logging Service.
Sep 5 19:58:33 cx632 log-proxyd[770] Event|1234|LOG_INFO|CDTR|1|Started System Logging Service.
It happens every few minutes, not a definite/identifiable frequency. What "configuration" is this "configuration change" referring to? Because I'm not making any change to the running-configuration (or startup-configuration) and there is only an idle ssh connection to the switch, which is not doing anything fancy.
Despite the log spam, it seems the time is synchronized and I see no adverse effect due to the "
Syslog client restarted due to configuration change"Thanks in advance