Fair enough.
I've disabled udp spoof, but am keeping forwarding turned on -  it seems to have plugged the hole.  One of the major reasons for using syslong-ng is the spoofing feature.  I look forward to getting to the cause.

# Sets up forwarding to other hosts
destination loghostd { udp(loghostd); };

destination loghosta { udp(loghosta); };

destination scribe02 { udp(scribe02); };






Balazs Scheidler <bazsi@balabit.hu>
Sent by: syslog-ng-admin@lists.balabit.hu

02/28/2005 01:28 PM
Please respond to
syslog-ng@lists.balabit.hu

To
syslog-ng@lists.balabit.hu
cc
Subject
Re: [syslog-ng]Syslog-NG 1.6.6 memory leak when sending UDP logs





On Mon, 2005-02-28 at 11:34 -0500, henry@shoelacecity.com wrote:
>
> No sooner did I write this that ElectricFence reported back (after 2
> hours of uptime):
>
> "ElectricFence: Exiting: mprotect() failed: Cannot allocate memory"

the workaround probably is to disable spoof-source if you can do that in
your infrastructure, it seems to be related to that function, I can have
a closer look tomorrow.

--
Bazsi


_______________________________________________
syslog-ng maillist  -  syslog-ng@lists.balabit.hu
https://lists.balabit.hu/mailman/listinfo/syslog-ng
Frequently asked questions at http://www.campin.net/syslog-ng/faq.html