I just upgraded syslog-ng from 3.4.1 to 3.4.4 and can confirm that with the same configuration, it is using twice as much cpu. See the attached graph. We also take 15 minute snapshots of our processes and for the syslog-ng process the CPU usage is shown below. Note that when the process ID changes from 12307 to 5156 the CPU doubles. Time USER PPID PPID %CPU VSZ ELAPSED TIME COMMAND 074602 root 12307 19898 11.1 787228 21:21:12 02:23:20 /usr/local/sbin/syslog-ng 080101 root 12307 19898 11.1 787228 21:36:11 02:25:04 /usr/local/sbin/syslog-ng 081601 root 12307 19898 11.2 787228 21:51:11 02:26:58 /usr/local/sbin/syslog-ng 083101 root 12307 19898 11.2 787228 22:06:11 02:28:44 /usr/local/sbin/syslog-ng 084601 root 12307 19898 11.2 787228 22:21:11 02:30:32 /usr/local/sbin/syslog-ng 090101 root 12307 19898 11.2 776984 22:36:11 02:32:25 /usr/local/sbin/syslog-ng 091601 root 12307 19898 11.2 787228 22:51:11 02:34:35 /usr/local/sbin/syslog-ng 093102 root 5156 5155 23.3 705312 00:06:20 00:01:28 /usr/local/sbin/syslog-ng 094601 root 5156 5155 24.1 705772 00:21:19 00:05:08 /usr/local/sbin/syslog-ng 100101 root 5156 5155 24.0 705772 00:36:19 00:08:44 /usr/local/sbin/syslog-ng 101601 root 5156 5155 24.3 705772 00:51:19 00:12:29 /usr/local/sbin/syslog-ng 103101 root 5156 5155 23.8 705772 01:06:19 00:15:50 /usr/local/sbin/syslog-ng 104601 root 5156 5155 23.4 705772 01:21:19 00:19:05 /usr/local/sbin/syslog-ng 110101 root 5156 5155 23.2 705772 01:36:19 00:22:23 /usr/local/sbin/syslog-ng 111601 root 5156 5155 23.2 705772 01:51:19 00:25:56 /usr/local/sbin/syslog-ng 113101 root 5156 5155 23.3 705772 02:06:19 00:29:30 /usr/local/sbin/syslog-ng 114601 root 5156 5155 23.4 705772 02:21:19 00:33:09 /usr/local/sbin/syslog-ng 120101 root 5156 5155 23.4 705772 02:36:19 00:36:38 /usr/local/sbin/syslog-ng 121601 root 5156 5155 23.5 705772 02:51:19 00:40:17 /usr/local/sbin/syslog-ng 123101 root 5156 5155 23.5 705772 03:06:19 00:43:49 /usr/local/sbin/syslog-ng 124601 root 5156 5155 23.4 705772 03:21:19 00:47:14 /usr/local/sbin/syslog-ng 130101 root 5156 5155 23.5 705772 03:36:19 00:51:00 /usr/local/sbin/syslog-ng 131601 root 5156 5155 23.7 705772 03:51:19 00:54:50 /usr/local/sbin/syslog-ng 133101 root 5156 5155 23.9 705772 04:06:19 00:59:04 /usr/local/sbin/syslog-ng 134601 root 5156 5155 23.8 705772 04:21:19 01:02:25 /usr/local/sbin/syslog-ng 140102 root 5156 5155 23.8 705772 04:36:20 01:06:00 /usr/local/sbin/syslog-ng 141601 root 5156 5155 23.8 705772 04:51:19 01:09:30 /usr/local/sbin/syslog-ng 143101 root 5156 5155 23.9 705772 05:06:19 01:13:13 /usr/local/sbin/syslog-ng
