Support Support Downloads Knowledge Base Case Manager My Juniper Community

Knowledge Base

Search our Knowledge Base sites to find answers to your questions.

Ask All Knowledge Base Sites All Knowledge Base Sites JunosE Defect (KA)Knowledge BaseSecurity AdvisoriesTechnical BulletinsTechnotes Sign in to display secure content and recently viewed articles

[Junos] Syslog server receives duplicate syslog when using DNS-name as host

0

1

Article ID: KB36543 KB Last Updated: 15 Apr 2021Version: 1.0
Summary:

When using DNS-name as the host and the name is resolved to more than one IP, the syslog server will receive a duplicate syslog (with different destination address).

Symptoms:
lab@MX480-RE0# show system | display set
set system syslog host lab.test.com any any

lab@MX480-RE0# run show host lab.test.com 
lab.test.com has address 10.75.253.14
lab.test.com has address 10.75.253.9

2305 36.050690 10.75.253.18 10.75.253.14 Syslog 158 DAEMON.ERR: Mar 29 15:28:05 MX480-RE0 rshd[5315]: can't get stderr port: Protocol family not supported
2306 36.050698 10.75.253.18 10.75.253.9 Syslog 158 DAEMON.ERR: Mar 29 15:28:05 MX480-RE0 rshd[5315]: can't get stderr port: Protocol family not supported
Solution:

This is an expected behavior. To avoid this, it is recommended to configure IP address instead of DNS-name.

Example:

lab@MX480-RE0# set system syslog host 10.75.253.9 any any
Comment on this article > Affected Products Browse the Knowledge Base for more articles related to these product categories. Select a category to begin.

Getting Up and Running with Junos

Getting Up and Running with Junos Security Alerts and Vulnerabilities Product Alerts and Software Release Notices Problem Report (PR) Search Tool EOL Notices and Bulletins JTAC User Guide Customer Care User Guide Pathfinder SRX High Availability Configurator SRX VPN Configurator Training Courses and Videos End User Licence Agreement Global Search