strange characters in syslog message

michmoor

Does anyone know what the additional information is in the FRR routing adjacency syslog message in the 23.09 update?

pre-23.09

post-23.09

stephenw10

Where are you viewing that? It feels like something misinterpreting and translating an address perhaps.

michmoor

@stephenw10
From my remote syslog server which pushes out an email to me when there is a routing protocol adj blip.
So we're just looking at the snippet from syslog.

I checked syslog and i see the message.

stephenw10

Can you verify it appears the same way in the pfSense gui directly? Just in case it's some local interpreting it.

michmoor

@stephenw10

This is from the routing.log on the 6100

./routing.log:Nov  6 11:43:06 GAFW bgpd[40594]: %ADJCHANGE: neighbor 10.6.106.10(ep_141) in vrf default Up
./routing.log:Nov  6 13:22:13 GAFW bgpd[81763]: [N9HHH-F8H1M] %ADJCHANGE: neighbor 10.6.106.10(ep_141) in vrf default Up
./routing.log:Nov  6 22:02:58 GAFW bgpd[81763]: [PXVXG-TFNNT] %ADJCHANGE: neighbor 10.6.106.10(ep_141) in vrf default Down Interface down
./routing.log:Nov  6 22:02:58 GAFW bgpd[81763]: [H4B4J-DCW2R][EC 33554455] 10.6.106.10 [Error] bgp_read_packet error: Connection reset by peer
./routing.log:Nov  6 22:04:58 GAFW bgpd[81763]: [N9HHH-F8H1M] %ADJCHANGE: neighbor 10.6.106.10(ep_141) in vrf default Up
./routing.log:Nov  6 22:22:57 GAFW bgpd[81763]: [PXVXG-TFNNT] %ADJCHANGE: neighbor 10.6.106.10(ep_141) in vrf default Down Interface down
./routing.log:Nov  6 22:22:57 GAFW bgpd[81763]: [H4B4J-DCW2R][EC 33554455] 10.6.106.10 [Error] bgp_read_packet error: Connection reset by peer
./routing.log:Nov  6 22:24:57 GAFW bgpd[81763]: [N9HHH-F8H1M] %ADJCHANGE: neighbor 10.6.106.10(ep_141) in vrf default Up
./routing.log:Nov  7 15:14:11 GAFW bgpd[81763]: [PXVXG-TFNNT] %ADJCHANGE: neighbor 10.6.106.10(ep_141) in vrf default Down Interface down
./routing.log:Nov  7 15:14:11 GAFW bgpd[81763]: [H4B4J-DCW2R][EC 33554455] 10.6.106.10 [Error] bgp_read_packet error: Connection reset by peer
./routing.log:Nov  7 15:16:11 GAFW bgpd[81763]: [N9HHH-F8H1M] %ADJCHANGE: neighbor 10.6.106.10(ep_141) in vrf default Up

stephenw10

Ok that appears to be the FRR_ID for the message type:
https://docs.frrouting.org/en/latest/extlog.html#structured-data

michmoor

@stephenw10
Interesting..Must be a v9 thing then.

Thanks for checking.