From mboxrd@z Thu Jan  1 00:00:00 1970
From: Steve Grubb <sgrubb@redhat.com>
Subject: Re: [PATCH] Add error-handling actions to audisp-remote
Date: Tue, 23 Dec 2008 08:19:06 -0500
Message-ID: <200812230819.06450.sgrubb@redhat.com>
References: <200808281847.m7SIlbHs001641@greed.delorie.com>
	<007e01c95e89$09ad4290$958da70a@truly>
	<200812221504.38754.sgrubb@redhat.com>
Mime-Version: 1.0
Content-Type: text/plain;
  charset="utf-8"
Content-Transfer-Encoding: 7bit
Return-path: <linux-audit-bounces@redhat.com>
Received: from vpn-12-34.rdu.redhat.com (vpn-12-34.rdu.redhat.com
	[10.11.12.34])
	by ns3.rdu.redhat.com (8.13.8/8.13.8) with ESMTP id mBNDJC05007346
	for <linux-audit@redhat.com>; Tue, 23 Dec 2008 08:19:13 -0500
In-Reply-To: <200812221504.38754.sgrubb@redhat.com>
Content-Disposition: inline
List-Unsubscribe: <https://www.redhat.com/mailman/listinfo/linux-audit>,
	<mailto:linux-audit-request@redhat.com?subject=unsubscribe>
List-Archive: <https://www.redhat.com/archives/linux-audit>
List-Post: <mailto:linux-audit@redhat.com>
List-Help: <mailto:linux-audit-request@redhat.com?subject=help>
List-Subscribe: <https://www.redhat.com/mailman/listinfo/linux-audit>,
	<mailto:linux-audit-request@redhat.com?subject=subscribe>
Sender: linux-audit-bounces@redhat.com
Errors-To: linux-audit-bounces@redhat.com
To: linux-audit@redhat.com
List-Id: linux-audit@redhat.com

On Monday 22 December 2008 03:04:38 pm Steve Grubb wrote:
> > So I set it as "syslog" and then stopped the remote audit, then the local
> > audisp-remote stopped but no message about "remote ending".
>
> The intention is that it should output something.

After further review, it looks like the code that does this on the server side 
is not implemented. The network retries are what you would expect in the face 
of not getting notification that the server was going down. I'll see if we 
can add this in the next release.

-Steve