Hi, today i got a weird cenario: i rebooted our syslog-ng server and forgot to start the syslog-ng daemon. So far so (not) good. One of our webservers which sends his logs via UDP to the syslog-server became suddenly very slow. It is reproducable: whenever i stop the central syslog-server the sender-servers syslog-ng-process gets a very high memory usage (4GB!) within seconds... The log-traffic on this server is about 30MB/day... UDP is a connection-less protocol isnt? ;) The configuration of the sender-server: ----- options { sync (0); time_reopen (10); log_fifo_size (1000); long_hostnames (off); use_dns (no); use_fqdn (no); create_dirs (no); keep_hostname (yes); }; source s_sys { file ("/proc/kmsg" log_prefix("kernel: ")); unix-stream ("/dev/log"); internal(); # udp(ip(0.0.0.0) port(514)); }; destination a_udp { udp( "example.com" port(514) ); }; #log { source(s_sys); destination (a_udp); }; ----- sender: syslog-ng 2.1.3 reciever: syslog-ng 2.1.2 someone got an idea on this issue? Otto