Hi,
I have a strange problem with Kiwi Syslog Server 9.03.
It started to receive messages with incorrect hostname IP-addresses. For example, a message would normally say that the host-IP is 192.168.0.55, but now the host-IP would become something like 192.168.0.4. I haven't quite figured out the pattern for this, but the tendency is that the last octet goes toward the beginning of the number series. It would seem that the incorrect IP-addressses are always addresses that are even not in use in our network. Attached is a screenshot from actual output. I dotted the false messages with green dot.
.
I managed to solve the cause for this; We have Solarwinds Engineer's toolset v10.1 installed on the same computer (Win2003 SRV SP2). After I upgraded it to v10.3 or v10.4, the problem started to appear. Uninstalling the toolset and reinstalling Kiwi Syslog Server does not help.
I even took a system state -backup with ntbackup and restored the system state prior to Engineer's toolset 10.3/10.4 installation, but it didn't help.
If I use the syslog server included in Engineer's Toolset, the problem does not appear.
TIA,
Sami