Dot in syslog logging

[sebastien3]

Hello,

I can't find the meaning of the dot in front of a line in the log buffer :

Oct 26 18:30:25: %LINEPROTO-5-UPDOWN: Line protocol on Interface Vlan11, changed state to down
.Oct 26 18:30:25: %LINEPROTO-5-UPDOWN: Line protocol on Interface Vlan11, changed state to up
.Oct 26 18:30:25: %EC-5-L3DONTBNDL2: Gi1/0/8 suspended: LACP currently not enabled on the remote port.

What does the dot correspond to?

Thanks !

[Leo Laohoo]

Means the system clock is not synchronized.

[sebastien3]

No, I do not think so ! The switch does have a time source via NTP.

3750X-1#sh ntp status
Clock is synchronized, stratum 4, reference is 192.168.10.2
nominal freq is 119.2092 Hz, actual freq is 119.2149 Hz, precision is 2**19
ntp uptime is 3161955500 (1/100 of seconds), resolution is 8403

[Leo Laohoo]

That is the wrong command. 

Use "sh ntp associate".

Next, look at the logs:  Notice that in the first line, the NTP is synchronized but the next two lines (even though they are in the same second), they are not.  

That means that the NTP synchronize is getting dropped somewhere.  Debug NTP traffic and see.  

Also, depending on the platform and IOS version, it could be a bug.  I know I saw this in IOS version for 6500 (Sup720).

[sebastien3]

The ntp associations is :

3750X-1#sh ntp associations

  address         ref clock       st   when   poll reach  delay  offset   disp
*~192.168.10.2   213.251.128.249  3      3    256   377  4.368  -0.783  3.737
 * sys.peer, # selected, + candidate, - outlyer, x falseticker, ~ configured

I don't know if it's a bug on the 3750-X...

[Leo Laohoo]

I would not know because I do not know what IOS version the switch is on.  

[sebastien3]

Cisco IOS Software, C3750E Software (C3750E-UNIVERSALK9-M), Version 15.2(4)E10, RELEASE SOFTWARE (fc2)

[Leo Laohoo]

I have almost 800 x 3750X stacks and they are all on 15.2(4)E10 and I have never seen any of them lose NTP synch.  

Maybe configure multiple NTP servers and do an NTP debug.