Cisco SRW208P syslog

[dan]

Hello,

I recently installed a SRW208P switch. I configured it to log to our syslog server, but this is what I see:

an 17 03:36:07 cd-ps1-sw1.site.domain.net.au %LINK-W-Down:  e2
an 17 03:36:08 cd-ps1-sw1.site.domain.net.au %LINK-W-Down:  e1
an 17 03:36:47 cd-ps1-sw1.site.domain.net.au %LINK-I-Up:  e1
an 17 03:36:47 cd-ps1-sw1.site.domain.net.au %LINK-I-Up:  e2

The first word on this line should be "Jan". Instead of the "J" there is a single space.

Log entries from other devices is fine:

Jan 16 12:16:15 cd-ps1-rb1.site.domain.net.au  cd-ps1-rb1 udhcpc[302]: Lease of 172.16.1.42 obtained, lease time 43200
Jan 16 18:16:15 cd-ps1-rb1.site.domain.net.au cd-ps1-rb1 udhcpc[302]: Entering renew state

I am running the latest available firmware, the same as what is available for download on the cisco site.

Any known fixes or workarounds?

[David Hornstein]

Hi Dan,

I pulled out my old SRW208MP  which has been superseded by the new  300 series model,  SRW208MP-K9, to validate your query.

I  enabled and checked  a packet capture from my "Server Log" from my SRW208MP.  It does not include a timestamp.

I include my screen capture below. I must admit I never worried about it as my syslog application includes time and date.

Will this issue be fixed on my old SRW208MP... I think we have no hope in getting this fixed as the older SRW product as they have been replaced by the SRWxxx-K9  (300 series).

regards Dave

[dan]

Hi,

Thanks for your reply.

It is interesting that your capture contains no timestamp. I have not captured syslog packets from the SRW208P, I just assumed it was sending a broken timestamp. I am using the linux syslog daemon, which to my knowledge has never shown any obscure bugs like this in our environment.

I'm kind of annoyed that you say the SRW208 series has been superseeded. I only purchased this switch new in November 2010 and was advised this was a current supported model.

I might have to contact support and see what options are available.

Regards,

Dan