Solaris Syslog replying with icmp unreachable port 514

[rpaquin]

Solaris server is replying with icmp unreachable when cisco device tries to send syslog message on port 514.

I can see the syslog entry come from the switch and the server is replying with an icmp unreachable msg.

I have the syslog collecter running, and if you do a ps, the syslogd is running also..

# ps -ef | grep syslog

root 238 1 0 Sep 08 ? 0:00 /usr/sbin/syslogd -t

casuser 1078 943 0 15:34:34 ? 0:08 /opt/CSCOpx/bin/cwjava -cp:p /opt

/CSCOpx/lib -Xnoclassgc com.cisco.nm.sysloga.s

root 1478 1463 0 15:12:11 pts/3 0:00 grep syslog

anyone have any idea why the Solaris server would send out a icmp unreachable for this service? the solaris version is 8, with patches and the RME is 3.5 with IDU 9

[jsivulka]

Did you try stopping and restarting syslogd. It worked for me once. Hope it fixes the issue you are facing too.

[rpaquin]

yep, tried starting and stopping, reloaded recommended patches on solaris.

copied the syslog.conf file of another box that was working properly.

I think I'm just gonna reload the box, Cisco tech support has been awful. I opened a call Sept 8th on this issue and I have yet to get any reply other than lets try reloading the server.. which of course, destroyed my database, not that I was that concerned about it, I have a backup.. but the cisco tac guy didn't even know what he was doing.. I had to point out to him that this would zero my database and reset my system to default. sad very sad. The last contact was last thursday.. that is REALLY sad.. why do I pay for support again? someone remind me?

oh well, time to blow it away and reload it I guess.