You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Load the latest 20240510 image, only WARN and ERR log found in syslog, INFO level logs disappear for caclmgrd
No info level log found for systemctl caclmgrd service in syslog file in 202405 images, only warning log found in /var/log/syslog.
202405:
admin@str2-7050cx3-acs-12:~$ sudo systemctl status caclmgrd
● caclmgrd.service - Control Plane ACL configuration daemon
Loaded: loaded (/lib/systemd/system/caclmgrd.service; enabled; preset: enabled)
Active: active (running) since Thu 2024-12-26 01:49:19 UTC; 4h 36min ago
Main PID: 1485 (caclmgrd)
Tasks: 1 (limit: 9458)
Memory: 31.8M
CGroup: /system.slice/caclmgrd.service
└─1485 /usr/bin/python3 /usr/local/bin/caclmgrd
Dec 26 01:49:19 sonic systemd[1]: Started caclmgrd.service - Control Plane ACL configuration daemon.
Dec 26 01:49:22 str2-7050cx3-acs-12 caclmgrd[1485]: Unable to determine if ACL table 'NTP_ACL' contains IPv4 or IPv6 rules. Skipping table... ==> those are warning level logs
Dec 26 01:49:22 str2-7050cx3-acs-12 caclmgrd[1485]: Unable to determine if ACL table 'SNMP_ACL' contains IPv4 or IPv6 rules. Skipping table...
Dec 26 01:49:22 str2-7050cx3-acs-12 caclmgrd[1485]: Unable to determine if ACL table 'SSH_ONLY' contains IPv4 or IPv6 rules. Skipping table...
Dec 26 01:49:25 str2-7050cx3-acs-12 caclmgrd[1485]: Unable to determine if ACL table 'NTP_ACL' contains IPv4 or IPv6 rules. Skipping table...
Dec 26 01:49:25 str2-7050cx3-acs-12 caclmgrd[1485]: Unable to determine if ACL table 'SNMP_ACL' contains IPv4 or IPv6 rules. Skipping table...
Dec 26 01:49:25 str2-7050cx3-acs-12 caclmgrd[1485]: Unable to determine if ACL table 'SSH_ONLY' contains IPv4 or IPv6 rules. Skipping table...
202311:
admin@str3-7260cx3-acs-14:~$ sudo systemctl status caclmgrd
● caclmgrd.service - Control Plane ACL configuration daemon
Loaded: loaded (/lib/systemd/system/caclmgrd.service; enabled; vendor preset: enabled)
Active: active (running) since Thu 2024-12-26 06:14:10 UTC; 1h 40min ago
Main PID: 1310 (caclmgrd)
Tasks: 1 (limit: 9465)
Memory: 14.7M
CGroup: /system.slice/caclmgrd.service
└─1310 /usr/bin/python3 /usr/local/bin/caclmgrd
Dec 26 06:14:14 str3-7260cx3-acs-14 caclmgrd[1310]: ip6tables -A INPUT -d fc00::4c/128 -j DROP==> those are info level logs
Dec 26 06:14:14 str3-7260cx3-acs-14 caclmgrd[1310]: iptables -A INPUT -d 10.0.0.40/32 -j DROP
Dec 26 06:14:14 str3-7260cx3-acs-14 caclmgrd[1310]: ip6tables -A INPUT -d fc00::50/128 -j DROP
Dec 26 06:14:14 str3-7260cx3-acs-14 caclmgrd[1310]: iptables -A INPUT -d 10.0.0.8/32 -j DROP
Dec 26 06:14:14 str3-7260cx3-acs-14 caclmgrd[1310]: ip6tables -A INPUT -d fc00::8/128 -j DROP
Dec 26 06:14:14 str3-7260cx3-acs-14 caclmgrd[1310]: iptables -A INPUT -d 10.0.0.42/32 -j DROP
Dec 26 06:14:14 str3-7260cx3-acs-14 caclmgrd[1310]: ip6tables -A INPUT -d fc00::54/128 -j DROP
Dec 26 06:14:14 str3-7260cx3-acs-14 caclmgrd[1310]: iptables -A INPUT -m ttl --ttl-lt 2 -j ACCEPT
Dec 26 06:14:14 str3-7260cx3-acs-14 caclmgrd[1310]: ip6tables -A INPUT -p tcp -m hl --hl-lt 2 -j ACCEPT
Dec 26 06:14:15 str3-7260cx3-acs-14 caclmgrd[1310]: Issuing the following iptables commands:
admin@str3-7260cx3-acs-14:~$
Description
Steps to reproduce the issue:
No info level log found for systemctl caclmgrd service in syslog file in 202405 images, only warning log found in /var/log/syslog.
202405:
admin@str2-7050cx3-acs-12:~$ sudo systemctl status caclmgrd
● caclmgrd.service - Control Plane ACL configuration daemon
Loaded: loaded (/lib/systemd/system/caclmgrd.service; enabled; preset: enabled)
Active: active (running) since Thu 2024-12-26 01:49:19 UTC; 4h 36min ago
Main PID: 1485 (caclmgrd)
Tasks: 1 (limit: 9458)
Memory: 31.8M
CGroup: /system.slice/caclmgrd.service
└─1485 /usr/bin/python3 /usr/local/bin/caclmgrd
Dec 26 01:49:19 sonic systemd[1]: Started caclmgrd.service - Control Plane ACL configuration daemon.
Dec 26 01:49:22 str2-7050cx3-acs-12 caclmgrd[1485]: Unable to determine if ACL table 'NTP_ACL' contains IPv4 or IPv6 rules. Skipping table... ==> those are warning level logs
Dec 26 01:49:22 str2-7050cx3-acs-12 caclmgrd[1485]: Unable to determine if ACL table 'SNMP_ACL' contains IPv4 or IPv6 rules. Skipping table...
Dec 26 01:49:22 str2-7050cx3-acs-12 caclmgrd[1485]: Unable to determine if ACL table 'SSH_ONLY' contains IPv4 or IPv6 rules. Skipping table...
Dec 26 01:49:25 str2-7050cx3-acs-12 caclmgrd[1485]: Unable to determine if ACL table 'NTP_ACL' contains IPv4 or IPv6 rules. Skipping table...
Dec 26 01:49:25 str2-7050cx3-acs-12 caclmgrd[1485]: Unable to determine if ACL table 'SNMP_ACL' contains IPv4 or IPv6 rules. Skipping table...
Dec 26 01:49:25 str2-7050cx3-acs-12 caclmgrd[1485]: Unable to determine if ACL table 'SSH_ONLY' contains IPv4 or IPv6 rules. Skipping table...
202311:
admin@str3-7260cx3-acs-14:~$ sudo systemctl status caclmgrd
● caclmgrd.service - Control Plane ACL configuration daemon
Loaded: loaded (/lib/systemd/system/caclmgrd.service; enabled; vendor preset: enabled)
Active: active (running) since Thu 2024-12-26 06:14:10 UTC; 1h 40min ago
Main PID: 1310 (caclmgrd)
Tasks: 1 (limit: 9465)
Memory: 14.7M
CGroup: /system.slice/caclmgrd.service
└─1310 /usr/bin/python3 /usr/local/bin/caclmgrd
Dec 26 06:14:14 str3-7260cx3-acs-14 caclmgrd[1310]: ip6tables -A INPUT -d fc00::4c/128 -j DROP==> those are info level logs
Dec 26 06:14:14 str3-7260cx3-acs-14 caclmgrd[1310]: iptables -A INPUT -d 10.0.0.40/32 -j DROP
Dec 26 06:14:14 str3-7260cx3-acs-14 caclmgrd[1310]: ip6tables -A INPUT -d fc00::50/128 -j DROP
Dec 26 06:14:14 str3-7260cx3-acs-14 caclmgrd[1310]: iptables -A INPUT -d 10.0.0.8/32 -j DROP
Dec 26 06:14:14 str3-7260cx3-acs-14 caclmgrd[1310]: ip6tables -A INPUT -d fc00::8/128 -j DROP
Dec 26 06:14:14 str3-7260cx3-acs-14 caclmgrd[1310]: iptables -A INPUT -d 10.0.0.42/32 -j DROP
Dec 26 06:14:14 str3-7260cx3-acs-14 caclmgrd[1310]: ip6tables -A INPUT -d fc00::54/128 -j DROP
Dec 26 06:14:14 str3-7260cx3-acs-14 caclmgrd[1310]: iptables -A INPUT -m ttl --ttl-lt 2 -j ACCEPT
Dec 26 06:14:14 str3-7260cx3-acs-14 caclmgrd[1310]: ip6tables -A INPUT -p tcp -m hl --hl-lt 2 -j ACCEPT
Dec 26 06:14:15 str3-7260cx3-acs-14 caclmgrd[1310]: Issuing the following iptables commands:
admin@str3-7260cx3-acs-14:~$
Describe the results you received:
It's caused by #19232
In syslogger.py, it sets default level to NOTICE, which is higher than INFO.
Even it set min log priority to INFO, but INFO still disappear in syslog file.
https://github.com/sonic-net/sonic-host-services/blob/master/scripts/caclmgrd
We need to set level to INFO, no NOTICE, or set NOTICE priority smaller than INFO.
Describe the results you expected:
Need to check INFO level logs in syslog
Output of
show version
:Output of
show techsupport
:Additional information you deem important (e.g. issue happens only occasionally):
The text was updated successfully, but these errors were encountered: