On Mon, 2005-02-28 at 13:49 -0500, henry@shoelacecity.com wrote:
Fair enough. I've disabled udp spoof, but am keeping forwarding turned on - it seems to have plugged the hole. One of the major reasons for using syslong-ng is the spoofing feature. I look forward to getting to the cause.
Can you check if this simple one-liner solves the problem? (if you don't have scsh, touch afinet.c.x after applying the patch to satisfy build dependencies) diff -u -r1.25.4.6 afinet.c --- afinet.c 5 Aug 2004 11:35:12 -0000 1.25.4.6 +++ afinet.c 28 Feb 2005 19:17:30 -0000 @@ -653,6 +653,7 @@ if (libnet_write(self->lnet_ctx) < 0) { werror("Error sending raw frame, error: %z", libnet_geterror(self->lnet_ctx)); } + ol_string_free(msg_line); } else { fallback_socket: -- Bazsi