<div dir="ltr">L.S.,<br><br>this turned out to be something really specific.<br><br><a href="https://github.com/systemd/systemd/issues/29676">https://github.com/systemd/systemd/issues/29676</a><br><br><p dir="auto" style="box-sizing:border-box;margin-bottom:16px;color:rgb(31,35,40);font-family:-apple-system,BlinkMacSystemFont,"Segoe UI","Noto Sans",Helvetica,Arial,sans-serif,"Apple Color Emoji","Segoe UI Emoji";font-size:14px;margin-top:0px">Root cause found, at least: as far as I can dig.</p><p dir="auto" style="box-sizing:border-box;margin-top:0px;margin-bottom:16px;color:rgb(31,35,40);font-family:-apple-system,BlinkMacSystemFont,"Segoe UI","Noto Sans",Helvetica,Arial,sans-serif,"Apple Color Emoji","Segoe UI Emoji";font-size:14px">The system running the sink is connected to two networks and is accepting journals from 1 system on one and 6 on the other network. All systems have the above mentioned versions (Debian 12.2, kernel 6.1.0-13-amd64, systemd 252.17-1~deb12u1), all are using the systemd-journal-upload.</p><p dir="auto" style="box-sizing:border-box;margin-top:0px;margin-bottom:16px;color:rgb(31,35,40);font-family:-apple-system,BlinkMacSystemFont,"Segoe UI","Noto Sans",Helvetica,Arial,sans-serif,"Apple Color Emoji","Segoe UI Emoji";font-size:14px">The six on the first network were working fine, dumping to their hearts content.</p><p dir="auto" style="box-sizing:border-box;margin-top:0px;margin-bottom:16px;color:rgb(31,35,40);font-family:-apple-system,BlinkMacSystemFont,"Segoe UI","Noto Sans",Helvetica,Arial,sans-serif,"Apple Color Emoji","Segoe UI Emoji";font-size:14px">The single system on the second was having the above mentioned problems.</p><p dir="auto" style="box-sizing:border-box;margin-top:0px;margin-bottom:16px;color:rgb(31,35,40);font-family:-apple-system,BlinkMacSystemFont,"Segoe UI","Noto Sans",Helvetica,Arial,sans-serif,"Apple Color Emoji","Segoe UI Emoji";font-size:14px">Working with precision, the systemd-journal-remote.socket's ListenStreams were configured to be listening on the ip addresses reserved for that specific purpose. This was done with the edit/override possibility on the socket:</p><div class="gmail-snippet-clipboard-content gmail-notranslate gmail-position-relative gmail-overflow-auto" style="box-sizing:border-box;color:rgb(31,35,40);font-family:-apple-system,BlinkMacSystemFont,"Segoe UI","Noto Sans",Helvetica,Arial,sans-serif,"Apple Color Emoji","Segoe UI Emoji";font-size:14px;overflow:auto"><pre class="gmail-notranslate" style="box-sizing:border-box;font-family:ui-monospace,SFMono-Regular,"SF Mono",Menlo,Consolas,"Liberation Mono",monospace;font-size:11.9px;margin-top:0px;margin-bottom:16px;padding:16px;overflow:auto;line-height:1.45;border-radius:6px"><code class="gmail-notranslate" style="box-sizing:border-box;font-family:ui-monospace,SFMono-Regular,"SF Mono",Menlo,Consolas,"Liberation Mono",monospace;padding:0px;margin:0px;background:transparent;border-radius:6px;word-break:normal;border:0px;display:inline;overflow:visible;line-height:inherit">$ sudo systemctl edit systemd-journal-remote.socket :
...
[Socket]
ListenStream=
ListenStream=<a href="http://10.0.0.202:19532">10.0.0.202:19532</a>
ListenStream=<a href="http://10.1.1.202:19532">10.1.1.202:19532</a>
...
</code></pre><div class="gmail-zeroclipboard-container gmail-position-absolute gmail-right-0 gmail-top-0" style="box-sizing:border-box"><span aria-label="Copy" class="gmail-ClipboardButton gmail-btn gmail-js-clipboard-copy gmail-m-2 gmail-p-0 gmail-tooltipped-no-delay" value="$ sudo systemctl edit systemd-journal-remote.socket :
...
[Socket]
ListenStream=
ListenStream=10.0.0.202:19532
ListenStream=10.1.1.202:19532
..." tabindex="0" role="button" style="box-sizing:border-box;display:inline-block;line-height:20px;vertical-align:middle;border-width:1px;border-style:solid;border-radius:6px;padding:0px"></span></div></div><p dir="auto" style="box-sizing:border-box;margin-top:0px;margin-bottom:16px;color:rgb(31,35,40);font-family:-apple-system,BlinkMacSystemFont,"Segoe UI","Noto Sans",Helvetica,Arial,sans-serif,"Apple Color Emoji","Segoe UI Emoji";font-size:14px">Guess what: the 6 working clients were on the first ip, the 1 that didn't on the second.</p><ul dir="auto" style="box-sizing:border-box;padding-left:2em;margin-top:0px;margin-bottom:16px;color:rgb(31,35,40);font-family:-apple-system,BlinkMacSystemFont,"Segoe UI","Noto Sans",Helvetica,Arial,sans-serif,"Apple Color Emoji","Segoe UI Emoji";font-size:14px"><li style="box-sizing:border-box;margin-left:0px">Changing the order resulted in 1 working and 6 failing clients.</li><li style="box-sizing:border-box;margin-top:0.25em;margin-left:0px">Adding an additional ListenStream with 127.0.0.1 didn't change anything.</li><li style="box-sizing:border-box;margin-top:0.25em;margin-left:0px">Removing all ListenStream settings resulting in listening on <a href="http://0.0.0.0:19532">0.0.0.0:19532</a> made all 7 systems working.</li></ul><br class="gmail-Apple-interchange-newline"><div>JdH.</div><div><br></div><span class="gmail_signature_prefix">-- </span><br><div dir="ltr" class="gmail_signature" data-smartmail="gmail_signature">"Piracy is simply demand where supply does not exist."</div></div>