> ------------------------------<br>> <br>> Message: 3<br>> Date: Thu, 24 Jan 2008 12:41:36 +0000<br>> From: Joe Fegan <<a href="mailto:joe_fegan@hotmail.com">joe_fegan@hotmail.com</a>><br>> Subject: Re: [syslog-ng] Syslog-ng too many open files<br>
> To: Syslog-ng users' and developers' mailing list<br>> <<a href="mailto:syslog-ng@lists.balabit.hu">syslog-ng@lists.balabit.hu</a>><br>> Message-ID: <<a href="mailto:BAY111-W20A021959661E71A0B78C39B380@phx.gbl">BAY111-W20A021959661E71A0B78C39B380@phx.gbl</a>><br>
> Content-Type: text/plain; charset="windows-1256"<br>> <br>> <br>> What version of syslog-ng is this? Is it 2.0.7?<br>> <br>> Could it be the same issue recently reported as "syslog-ng 2.0.7 major problem?"<br>
> in the list archives, where syslog-ng 2.0.7 does not close old files after SIGHUP?<br>> 300,000 is a lot of files...<br>><br><span style="color: rgb(51, 51, 255);">I'm using Syslog-ng 2.0.0-1 in a Debian Etch Linux.</span><br style="color: rgb(51, 51, 255);">
<br>> ------------------------------<br>> <br>> Message: 4<br>> Date: Thu, 24 Jan 2008 12:46:53 -0000<br>> From: "Geller, Sandor \(IT\)" <<a href="mailto:Sandor.Geller@morganstanley.com">Sandor.Geller@morganstanley.com</a>><br>
> Subject: Re: [syslog-ng] Syslog-ng too many open files<br>> To: "Syslog-ng users' and developers' mailing list"<br>> <<a href="mailto:syslog-ng@lists.balabit.hu">syslog-ng@lists.balabit.hu</a>><br>
> Message-ID:<br>> <<a href="mailto:14F0A35F6E466D48BF11108F4E09E68C0970D239@LNWEXMB58.msad.ms.com">14F0A35F6E466D48BF11108F4E09E68C0970D239@LNWEXMB58.msad.ms.com</a>><br>> Content-Type: text/plain; charset="us-ascii"<br>
> <br>> Hi,<br>> <br>> > Hello,<br>> ><br>> > I'm receiving many messages on my syslog-ng like this:<br>> ><br>> > syslog-ng[20419]: Error opening file for writing; filename="...",<br>
> > error='Too many open files (24)'<br>> > syslog-ng[20419]: Error accepting new connection; error='Too many open<br>> > files (24)'<br>> <br>> Try raising the per-process number of open files. Please refer to<br>
> ulimit.<br>> <br>> > In lsof output, the syslog-ng daemon has many files opened and when I<br>> > try to login from other console or change to root account, it gets<br>> > blocked.<br>> ><br>
> > I've increased the sysctl fs.file-max to 300000 but the<br>> > problem persists.<br>> <br>> This raises the per-system limit only. per-process limits still<br>> apply as well as the maximum (maybe 4096, I'm not sure) is hardcoded<br>
> into the kernel, so without recompiling you r kernel you can't exceed<br>> this limitation.<br><span style="color: rgb(51, 51, 255);">When you said that's hardcoded, you mean that I have to change the source code or it's configurable via make config?<br>
<br style="color: rgb(51, 51, 255);"></span>> <br>> > Any ideas what's going wrong?<br>> <br>> Without seeing more details (syslog-ng version number, configuration,<br>> approximate number of clients, client configs) we could only guess.<br>
> <br>> Regards,<br>> <br>> Sandor<br>> --------------------------------------------------------<br>> <br>> NOTICE: If received in error, please destroy and notify sender. Sender does not intend to waive confidentiality or privilege. Use of this email is prohibited when received in error.<br>
> <br>> <br><br>