- syslog-ng - lists.balabit.hu

[Bug 151] New: syslog-ng opens /dev/ log device on every HUP without closing it first
by bugzilla＠bugzilla.balabit.com 08 Oct '12

08 Oct '12

https://bugzilla.balabit.com/show_bug.cgi?id=151 Summary: syslog-ng opens /dev/log device on every HUP without closing it first Product: syslog-ng Version: 3.3.x Platform: Other OS/Version: Solaris Status: NEW Severity: major Priority: unspecified Component: syslog-ng AssignedTo: bazsi(a)balabit.hu ReportedBy: michael.hocke(a)nyu.edu Type of the Report: bug Estimated Hours: 0.0 On Solaris 10 the /dev/log device can be held open concurrently for up to only 16 instances. syslog-ng opens a new instance of /dev/log after HUPing the process, i.e. after the 16th HUP syslog-ng quits because the new configuration fails and so does the previous configuration. This has been working fine in 3.0. I cannot test if this started to happen in 3.1, 3.2, or if this is new for 3.3. -- Configure bugmail: https://bugzilla.balabit.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are watching all bug changes.

1 8

Strange error in /var/log/message about GPF (ip protection)
by Sebastien Pasche 06 Oct '12

06 Oct '12

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hello I have some strange messages in my var/log/message about ip protection. Oct 5 16:54:01 mgblcof01 kernel: [1284555.180325] syslog-ng[9735] general protection ip:36104616f2 sp:7fba6e3304a0 error:0 in libglib-2.0.so.0.3200.4[3610400000+11d000] Any idea what would make syslog-ng having trouble with GPF ? My version of syslog-ng [root@mgblcof01 ]# syslog-ng --version syslog-ng 3.3.6.90 Installer-Version: 3.3.6.90 Revision: Compile-Date: Sep 20 2012 13:34:34 Default-Modules: affile,afprog,afsocket,afuser,basicfuncs,csvparser,dbparser,syslogformat,afsql Available-Modules: afsocket-tls,dbparser,afuser,syslogformat,afprog,confgen,csvparser,affile,dummy,basicfuncs,afsocket,afmongodb,tfjson,afsocket-notls,afsql,convertfuncs Enable-Debug: off Enable-GProf: off Enable-Memtrace: off Enable-IPv6: on Enable-Spoof-Source: on Enable-TCP-Wrapper: on Enable-Linux-Caps: on Enable-Pcre: on OS : [root@mgblcof01 ]# uname -a Linux mgblcof01 3.5.3-1.fc17.x86_64 #1 SMP Wed Aug 29 18:46:34 UTC 2012 x86_64 x86_64 x86_64 GNU/Linux Thank ! Sébastien -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.12 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://www.enigmail.net/ iQIcBAEBAgAGBQJQbvbbAAoJEE3IBph3MKVPeM0P/js5cILHxgbACshcmcPPlXUH ELiDuP50QKkOHTzQOprK8kpBrRuzE2El5PuI0Tyyvbo4pF/Ehtlbe0donSh1w2aF vWGdj6EVxCtUDLJ3L2ZGiIxICyqDW/EDeSz04FGMp5pMdX++iVg2vnMuMic4kHsu OSaUWTdQ3v4ntC4HaI26xtnqjw7+egKND34ll2XgYFCMstTBwHdHwdXYWAD3KPBj jX+nqXgk5ADJybjAXS0u3TAb7rmPZsZ3cNn41i+15ed+I6ZcPGwkefFRsMmxbzrN wrwg+Dc2gk2ezP/Cdk5uZzlyYJe9R5AMeTeGvwPCaoEzznyAuDPlC+v+tF38KGri t+pEJ1Vy9QL1uqVAgj6aYzOzGZhAEimNfwBo/0WqV7DL2+FfT+5IyvIR9goRP+sS 7odfN9OyCnR3cYPSQLmtC4Xqlq4XwHE3BpIV364WArSblmGNpiuE3uMUwiHpjvrO mkSHzTmZLjvLfuJfV+ECC+xwBqVVStvB8r/upotFsT05ArQCJb5y+wJOlofPP3cg bQ+pGDw1Wf1OdyGj6n6ITu18VLKV1jx4XIkv3yTqbggffbAvuZ7XaUXVQQQYsaFT 4hIA2/YrMqEXK8HVHb1/zSD36bYzI/zrmUSs3H2opjW+b5doqmZ0KCYDgmvvnIEo wTdz8m7ZiQT+AJ8Lp+Ng =4lxl -----END PGP SIGNATURE-----

3 2

Syslog stops writing logs with extra [SQL] destination
by Anton Koldaev 05 Oct '12

05 Oct '12

Hello, I have the same "expr" logs going to file AND sql. With file-only logging it works great. When I'm enabling SQL logging it stops writing both to file and to sql ~1-10min(from 10 000 to 200 000 lines) after start. Every time there are no dropped messages, but 1000 stored for SQL location. syslog-ng 3.3.6 - number of nodes: ~150 - max-connections(200) - log_iw_size(20000) - log_fetch_limit(100) - log_fifo_size (400000); - flush_lines(100) - flush_timeout(100) - flags(flow-control) # the same issue with and without flow control syslog-server ~ % sudo syslog-ng-ctl stats | sort -rnk6 -t ";" | grep expr dst.file;d_app_expr#0;/logs/app/expr.log;o;processed;30457 destination;d_app_expr;;a;processed;30457 destination;d_mysql_expr;;a;processed;30003 * dst.sql;d_mysql_expr#0;mysql,mysql-db-ip,port,syslog_production,expr_${HOST}_${R_Y;a;stored;1000 * dst.sql;d_mysql_expr#0;mysql,mysql-db-ip,port,syslog_production,expr_${HOST}_${R_Y;a;dropped;0 dst.file;d_app_expr#0;/logs/app/expr.log;o;stored;0 dst.file;d_app_expr#0;/logs/app/expr.log;o;dropped;0 I see no errors in syslog-ng debug logs or mysql error log. After restarting syslog-ng it writes both logs for some time and stops again. I will appreciate any help. Additional question: is there any mysqltuner.pl-like tool for syslog-ng? I don't feel happy to tune all those buffers and windows manually with no being sure it will help. -- Best regards, Koldaev Anton

1 1

Re: [syslog-ng] I need some help with Syslog-ng and the new json parser
by Sebastien Pasche 05 Oct '12

05 Oct '12

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Thank a lot for the help. I tested with syslog-ng 3.4.0 alpha3 and its working but I use 3.3 :-( So I will use regex and move to json parser when 3.4 will be stable :) Thanks again ! Sébastien On 10/05/2012 12:00 PM, syslog-ng-request(a)lists.balabit.hu wrote: > Sebastien Pasche <braoru(a)gmail.com> writes: > >> > I will present to you what I want to do and what I actually have. >> > >> > I would like to extract a field from a json log arriving in this source : >> > >> > source s_collector_tcp_json { >> > tcp(ip(0.0.0.0) port(514) flags(no-multi-line) flags(no-parse)); >> > }; >> > >> > And replacing the Program field I use in my destination > [...] >> > from the field @type of this json log : >> > >> > { >> > "@source": "tcp://127.0.0.1:9999/client/127.0.0.1:57530", >> > "@type": "tomcat_logstash_raw_json", >> > "@tags": [ >> > "tomcat_site" >> > ], >> > "@fields": { >> > "priority": "INFO", >> > "logger_name": "com.zzz.user.UserData", >> > "thread": "TP-Processor7", >> > "class": >> > "org.apache.jsp.WEB_002dINF.jsp.user.ViewInvoiceDetail_jsp", >> > "file": "ViewInvoiceDetail_jsp.java:162", >> > "method": "_jspService", >> > "prop_userIp": "192.168.215.50", >> > "prop_userId": "1440704" >> > }, >> > "@source_host": "127.0.0.1:57530", >> > "@source_path": "com.leshop.user.UserData", >> > "@message": "order : {WAREHOUSE_TYPE=drive, OID=5693367, >> > ORDER_DATE=2012-10-03 08:49:17.41, SHIPPING_FRESH=0.0, >> > FROZEN_DEPOSIT=0.0, WAREHOUSE_ID=5, DUE_AMOUNT=0.0, TOTAL_CREDITS=0.0, >> > ADDRESS_NUMBER=, DELIV_HELPFUL_INDICATION=, DELIVERY_MODE=20:00, >> > DELIVERY_DATE=2012-10-03 00:00:00.0, TOTAL=134.75, ACTION_TOTAL=0.0, >> > ORDER_NUMBER=abc-014085706-xyz, TRACK_TRACE=, RETAILER_GROUP=0, ZIP=, >> > ORDER_STATE=3, PAYMENT_TYPE=7, DELIV_DOORCODE=, FROZEN_FEES=0.0, >> > ENV_CO2=0.0, NAME= , ENV_CO2_RETAIL=0.0, HIDE_BVR=false, ADDRESS=, >> > TOTAL_CREDIT=0.0, MODIFICATION_STATE=1, REMINDER_LEVEL=0, >> > SUBTOTAL=134.75, GRAND_TOTAL=134.75, BVR_REFERENCE=, CITY=, >> > DELIV_PHONE=, SHIPPING_FIXED=0.0}", >> > "@timestamp": "2012-10-03T06:49:23.373000Z" >> > } > [...] > > Assuming that the JSON arrives on a single line, something along these > lines should do the trick: > > parser p_tomcat_json { > json-parser(prefix("json.")); > }; > > rewrite rw_tomcat_site_logstash_json_program_name { > set("${json.type}", value("$PROGRAM")); > }; > > And then chain it together: > > log { > source(s_collector_tcp_json); > parser(p_tomcat_json); > rewrite(rw_tomcat_site_logstash_json_program_name); > destination(d_file_normal_r); > }; > > Hope that helps! -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.12 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://www.enigmail.net/ iQIcBAEBAgAGBQJQbrE/AAoJEE3IBph3MKVPidkQALooeGZRm2FEIGPN7uqJVrRc 2yeQ0L68Nny0WLnR2mZU4nOy7EHMKLPufrYINAp1FyNM7U4xDOkLTxoVhkPtejis hKce2Z/djJX1cABlPl0qf3ClBsSnH7oe745BvSdXUnBXFGc7mBV7E10GF4tb4Ce/ ElUUEx2UyIfCByOcETOJkvZrY1WSky1MqJZLI5dX2BzjKsdBML5Bmi/pj1VVRCaa WUC6lkSnGUdoyAdVCF7hHzNwQbm1txTUjsdo1oUvdaly4ASDkHWuHhRXsNw9gugA 3TRNugj/69oeOzxZkt/eVukpcK2JbeJ6UGVWpYe8Vo3x5slHXT5tObOcIni4eCYU /DnGFs7UT1nGmQ8HYTkytgnDUa3dpAcVU60xdyLsjkx7WPUmLjKJcKD//cXdJXH/ uzI3WvEEqnPqb3oRJfNqrR0Ikn1tF0jOHpJxeW3lQIYMaadahdTUQ1dhccycUWrB ISEoy1tFSUJepOHcZf+RGRTopxJVxvpK7JondR3oV0BMDf00Vgu8SLmuWl/ok3aZ KFAZ019kMYX1Bq0sCAtOyJwWzIXUFEtMz8rEkc1V0fbAI032WY6IzUecWuLGM783 uZ/C2bDBR2Xgbs/oDMhZImKJzjouN8IGuNK9ZaRMH0Qx0dx4wjc8QORD9hB2kmmF lEjQIEQ8D8ADAavqwURp =pUIX -----END PGP SIGNATURE-----

1 0

I need some help with Syslog-ng and the new json parser
by Sebastien Pasche 04 Oct '12

04 Oct '12

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hello :) I will present to you what I want to do and what I actually have. I would like to extract a field from a json log arriving in this source : source s_collector_tcp_json { tcp(ip(0.0.0.0) port(514) flags(no-multi-line) flags(no-parse)); }; And replacing the Program field I use in my destination : #Destination that uses received time as timestamp for logs destination d_file_normal_r {file("/var/log/leshop/leshop_log/$R_YEAR/$HOST/$PROGRAM/$R_YEAR-$R_MONTH-$R_DAY.log" template(t_d_default_r) group(users) dir_group(users) perm(0640) dir_perm(0750) flags(no-multi-line) frac_digits(6));}; #Templates for destination that uses received time as timestamp for logs template t_d_default_r { template("$R_ISODATE $HOST LEVEL=$LEVEL $MSGHDR $MSG\n"); }; from the field @type of this json log : { "@source": "tcp://127.0.0.1:9999/client/127.0.0.1:57530", "@type": "tomcat_logstash_raw_json", "@tags": [ "tomcat_site" ], "@fields": { "priority": "INFO", "logger_name": "com.zzz.user.UserData", "thread": "TP-Processor7", "class": "org.apache.jsp.WEB_002dINF.jsp.user.ViewInvoiceDetail_jsp", "file": "ViewInvoiceDetail_jsp.java:162", "method": "_jspService", "prop_userIp": "192.168.215.50", "prop_userId": "1440704" }, "@source_host": "127.0.0.1:57530", "@source_path": "com.leshop.user.UserData", "@message": "order : {WAREHOUSE_TYPE=drive, OID=5693367, ORDER_DATE=2012-10-03 08:49:17.41, SHIPPING_FRESH=0.0, FROZEN_DEPOSIT=0.0, WAREHOUSE_ID=5, DUE_AMOUNT=0.0, TOTAL_CREDITS=0.0, ADDRESS_NUMBER=, DELIV_HELPFUL_INDICATION=, DELIVERY_MODE=20:00, DELIVERY_DATE=2012-10-03 00:00:00.0, TOTAL=134.75, ACTION_TOTAL=0.0, ORDER_NUMBER=abc-014085706-xyz, TRACK_TRACE=, RETAILER_GROUP=0, ZIP=, ORDER_STATE=3, PAYMENT_TYPE=7, DELIV_DOORCODE=, FROZEN_FEES=0.0, ENV_CO2=0.0, NAME= , ENV_CO2_RETAIL=0.0, HIDE_BVR=false, ADDRESS=, TOTAL_CREDIT=0.0, MODIFICATION_STATE=1, REMINDER_LEVEL=0, SUBTOTAL=134.75, GRAND_TOTAL=134.75, BVR_REFERENCE=, CITY=, DELIV_PHONE=, SHIPPING_FIXED=0.0}", "@timestamp": "2012-10-03T06:49:23.373000Z" } I know I can do it with patterndb or directly with a regex like . #match and create a group with le type value filter f_bigip_http_vs_extract { match('"@type": "([^\"]+)",' value("MESSAGE") type("pcre") flags("store-matches" "ignore-case")); }; #replace program field with extracted value from le log line rewrite rw_tomcat_site_logstash_json_program_name { subst('.*', "${1}", value("PROGRAM"));}; But I would like to use the new json parser to keep a configuration as clean as possible. Anyone can help me to know where I need to start ? (not found anyting into the admin guide :/) My version of syslog-ng : [root@mgblcof01 192.168.217.205]# syslog-ng --version syslog-ng 3.3.6.90 Installer-Version: 3.3.6.90 Revision: Compile-Date: Sep 20 2012 13:34:34 Default-Modules: affile,afprog,afsocket,afuser,basicfuncs,csvparser,dbparser,syslogformat,afsql Available-Modules: afsocket-tls,dbparser,afuser,syslogformat,afprog,confgen,csvparser,affile,dummy,basicfuncs,afsocket,afmongodb,tfjson,afsocket-notls,afsql,convertfuncs Enable-Debug: off Enable-GProf: off Enable-Memtrace: off Enable-IPv6: on Enable-Spoof-Source: on Enable-TCP-Wrapper: on Enable-Linux-Caps: on Enable-Pcre: on Thank ! Seb -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.12 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://www.enigmail.net/ iQIcBAEBAgAGBQJQbStAAAoJEE3IBph3MKVPpZgP/0fyydXA3dBwBm4/A66DsJCJ DfsGtQYVEXMgtQhit+nh47ruBvl6O+E6XPTnL2vKjObKr8J7A1gy3Zsf6CAzkBod Wxs74wPHOvy8UIRRmzDl2rU+xv0Ak84lN7ngFjgJZpqlqajlPyfj48dKPwINV80X 3hZLpFHXD0y0T8JoL30rm35nbDMVfRBqFnLd5U4J8dMBZ6O8Y0bnYvPZ65GR3M0S L8x3cc4suOBSg/PEF4FAL/j/QMCTAnGvntIFN4pYOU9qkXixqtwheJ2EenzI+W2M mcs8VPWjRAfgg2w3gzy3UOGMgogHS2yR9guqHowGOeTuVfKEO1D7ZaP1MRHEfATj AdJVNGuDilquJwuLCLUwinvp68BpcJ1cM5E2t5P7FwZJQxfX8MJrGwQ+4bF2pvhI YzIRGHDmB888CRNYoyyrFCoXkjZ3/Nd8FxSx2BBhb3PNRgEkNWgfbkuAr422W+Ni ZzzDrD5Rpl7E7Fzz7Xb2XAxJJS7E+tj5d/ukD3PGFFfr6kXNHwfQyxCCgQOt93+2 zuSYGg0QPpztyK4y83NXaM+L7dYsP75pG24FhnUQFvA164sOKqT/i4/4mgu6u8pF ZX1Ji//fa2CfqEw0nhmrZxYYwXi4HYZ8uUd6MpQSfE04J5ymyOcrWa7wVBN+jlev Ts/ZAjTBDJku7JYLBmSf =VpL2 -----END PGP SIGNATURE-----

2 1

how to convert multiline message to single line?
by Sergey V. Lobanov 03 Oct '12

03 Oct '12

Hello, I'd like to see multiline syslog messages as one line. Is it possible via syslog-ng 3.0? -- wbr, Sergey V. Lobanov Timezone: MSK(GMT+4)

4 6

[PATCH] afmongodb: Include libmongo-client/configure.gnu in the tarball
by Gergely Nagy 02 Oct '12

02 Oct '12

In order to install cleanly with an internal libmongo-client, we need that library to be compiled in statically, which is what the configure.gnu script (installed via autogen.sh from git) enforces. However, since configure.gnu is not part of libmongo-client, its make dist will not include it, so its parent must do that. For this reason, and similarly to how the same file in lib/ivykis is handled, include libmongo-client/configure.gnu in the EXTRA_DIST of afmongodb/Makefile.am. Reported-by: Peter Czanik <czanik(a)balabit.hu> Signed-off-by: Gergely Nagy <algernon(a)balabit.hu> --- modules/afmongodb/Makefile.am | 2 +- 1 files changed, 1 insertions(+), 1 deletions(-) diff --git a/modules/afmongodb/Makefile.am b/modules/afmongodb/Makefile.am index d022912..eb6b27b 100644 --- a/modules/afmongodb/Makefile.am +++ b/modules/afmongodb/Makefile.am @@ -17,7 +17,7 @@ libafmongodb_la_LDFLAGS = $(MODULE_LDFLAGS) endif BUILT_SOURCES = afmongodb-grammar.y afmongodb-grammar.c afmongodb-grammar.h -EXTRA_DIST = $(BUILT_SOURCES) afmongodb-grammar.ym +EXTRA_DIST = $(BUILT_SOURCES) afmongodb-grammar.ym libmongo-client/configure.gnu include $(top_srcdir)/build/lex-rules.am -- 1.7.9

1 0

[PATCH 1/2] json: Include all sources in _SOURCES
by Gergely Nagy 02 Oct '12

02 Oct '12

With the renaming and such the list of sources required to build the plugin got out of sync with reality. This patch corrects that, by adding the two new headers, and removing an old, unused one. Reported-by: Peter Czanik <czanik(a)balabit.hu> Signed-off-by: Gergely Nagy <algernon(a)balabit.hu> --- modules/json/Makefile.am | 3 ++- 1 files changed, 2 insertions(+), 1 deletions(-) diff --git a/modules/json/Makefile.am b/modules/json/Makefile.am index 110b1b5..3338ff5 100644 --- a/modules/json/Makefile.am +++ b/modules/json/Makefile.am @@ -9,10 +9,11 @@ module_LTLIBRARIES = libjson-plugin.la libjson_plugin_la_SOURCES = \ format-json.c \ + format-json.h \ jsonparser.c \ + jsonparser.h \ jsonparser-grammar.y \ jsonparser-parser.c jsonparser-parser.h \ - json-plugin.h \ json-plugin.c libjson_plugin_la_CPPFLAGS = $(AM_CPPFLAGS) -- 1.7.9

1 1

Re: [syslog-ng] Syslog_NG
by Munh-Erdene E 02 Oct '12

02 Oct '12

Dears,,, Tnx for your quickly reply. :) I've 1 syslog-ng server and 8 clients in my network. Syslog-Ng server collecting all log of that clients. But syslog-ng can collecting only bash & sh shell logs. Can't collect all command log off csh, tcsh ... etc. other shells... BR--- Munkh-Erdene On Mon, Oct 1, 2012 at 10:47 PM, Gergely Nagy <algernon(a)balabit.hu> wrote: > Hi! > > I would like to ask you to write to the syslog-ng mailing list > (https://lists.balabit.hu/mailman/listinfo/syslog-ng) with syslog-ng > questions instead of contacting me directly. > > However, I will try to answer your mail here now, since I'm a little > confused about what you're trying to accomplish. > > Munh-Erdene E <munhluu(a)gmail.com> writes: > > > Syslog_NG works fine with bash & sh shells &&& writing clientlogs on > > server. > > > > But not working other shells, example: csh, ksh, tscsh ... > > > > In Client side: > > Add some config on *Vi /etc/bashrc * > > > > # log to syslog > > > > declare ME > > > > ME=$(awk -v val=$UID -F ":" '$3==val{print $1}' /etc/passwd) > > > > export PROMPT_COMMAND='{ msg=$(history 1 | { read x y; echo $y; }); > logger > > -p local5.info "CMDLOG PWD=$PWD ; USER=$ME ; COMMAND=$msg"; }' > > > > > > > > *2. Vi /etc/rsyslog.conf* > > > > > > > > *.info;mail.none;authpriv.none;cron.none @192.168.0.1 > > > > authpriv.* @192.168.0.1 > > > > Can you help me? pls > > I don't really see where syslog-ng comes into play here? Neither logger > nor rsyslog have much to do with syslog-ng itself. Nor should any shell > or whatsoever affect syslog-ng, as it's a daemon that should be started > at boot time, the shell you use need not have any effect on its > behaviour. > > -- > |8] > >

2 1

[Bug 199] New: syslog-ng 3.3.6. 90 sometimes exits on SIGHUP on Solaris 10 SPARC
by bugzilla＠bugzilla.balabit.com 28 Sep '12

28 Sep '12

https://bugzilla.balabit.com/show_bug.cgi?id=199 Summary: syslog-ng 3.3.6.90 sometimes exits on SIGHUP on Solaris 10 SPARC Product: syslog-ng Version: 3.3.x Platform: Other OS/Version: Solaris Status: NEW Severity: normal Priority: unspecified Component: syslog-ng AssignedTo: bazsi(a)balabit.hu ReportedBy: irwin(a)princeton.edu Type of the Report: bug Estimated Hours: 0.0 Created an attachment (id=66) --> (https://bugzilla.balabit.com/attachment.cgi?id=66) configure.out Version: syslog-ng 3.3.6.90 Platform: Solaris 10 on SPARC I've been running syslog-ng 3.0.6 fine for several years. I've been trying to upgrade to 3.3.latest. When I upgraded to 3.3.6, syslog-ng would sometimes quit and dump core unexpectedly when I sent it SIGHUP as part of log file rotation. I figured it might be an ivykis issue perhaps related to https://bugzilla.balabit.com/show_bug.cgi?id=190 , so I've just tried upgrading to 3.3.6.90. But the error I see remains the same. Log message: Sep 26 03:00:03 example.org supervise/syslog-ng[23280]: Daemon exited due to a deadlock/signal/failure, restarting; exitcode='131' Here's the core dump's backtrace: gdb /usr/local/sbin/syslog-ng /var/core/core.syslog-ng.0.23281 GNU gdb (GDB) 7.4 ... Reading symbols from /var/local/sbin/syslog-ng...done. [New LWP 1] [New LWP 2] [New LWP 3] [Thread debugging using libthread_db enabled] [New Thread 1 (LWP 1)] [New Thread 2 (LWP 2)] [New Thread 3 (LWP 3)] Core was generated by `/usr/local/sbin/syslog-ng --cfgfile /etc/syslog-ng/main.conf --pidfile /var/run'. Program terminated with signal 3, Quit. #0 0xfef4e068 in kill () from /lib/libc.so.1 (gdb) bt #0 0xfef4e068 in kill () from /lib/libc.so.1 #1 0xff2b4c24 in main_loop_reload_config_apply () at mainloop.c:518 #2 0xff2b4640 in main_loop_io_worker_sync_call (func=0xff2b4a20 <main_loop_reload_config_apply>) at mainloop.c:455 #3 0xff2d68c8 in iv_signal_event (_this=0xff30ddfc) at iv_signal.c:169 #4 0xff2d62b8 in iv_event_raw_got_event (_this=0xff30de20) at iv_event_raw.c:87 #5 0xff2d3d38 in iv_run_active_list (active=<optimized out>, st=<optimized out>) at iv_main.c:235 #6 iv_main () at iv_main.c:279 #7 0xff2b4474 in main_loop_run () at mainloop.c:735 #8 0x00011538 in main (argc=1, argv=0xffbffd4c) at main.c:263 -- Configure bugmail: https://bugzilla.balabit.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are watching all bug changes.

1 6