In addition the syslog-ng receive logs from about 1000 clients when the usage of mem by syslog-ng keep growing I think maybe the reason of the problem is that there are so many log files being writted . I do another test ,using the same verson and the configure file,but receives logs from only one client,and usage of mem by syslog-ng doesn`t keep growing. But I don`t know the relationship between them. -----邮件原件----- 发件人: syslog-ng-bounces@lists.balabit.hu [mailto:syslog-ng-bounces@lists.balabit.hu] 代表 liuruihong 发送时间: 2007年9月25日 14:23 收件人: 'Syslog-ng users' and developers' mailing list' 主题: [syslog-ng] 答复: 答复: why dose the usage of mem by syslog-ng keep growing? The version of syslog-ng is 2.0.5 the configure file as follows： options { use_dns(no); create_dirs(yes);ts_format(iso); }; #options { log_fifo_size(3000); }; source src { udp(ip(0.0.0.0) port(514) ); }; filter f_kern { facility(kern); }; filter f_authpriv { facility(auth,authpriv); }; filter f_mail { facility(mail); }; filter f_cron { facility(cron); }; filter f_boot { facility(local7); }; filter f_spooler { facility(uucp, news) and level(crit..emerg); }; filter f_messages { level(info..emerg) and not facility(authpriv, cron, mail); }; #destination kern { file("/home/syslog-ng/$YEAR/$HOST/kernel-$MONTH"); }; #destination authpriv { file("/home/syslog-ng/$YEAR/$HOST/secure-$MONTH"); }; #destination mail { file("/home/syslog-ng/$YEAR/$HOST/maillog-$MONTH"); }; #destination cron { file("/home/syslog-ng/$YEAR/$HOST/cron-$MONTH"); }; #destination boot { file("/home/syslog-ng/$YEAR/$HOST/boot.log-$MONTH"); }; #destination spooler { file("/home/syslog-ng/$YEAR/$HOST/spooler-$MONTH"); }; #destination messages { file("/home/syslog-ng/$YEAR/$HOST/messages-$MONTH"); }; destination kern { file("/home/syslog-ng/$YEAR/$HOST/kernel-$HOUR"); }; destination authpriv { file("/home/syslog-ng/$YEAR/$HOST/secure-$HOUR"); }; destination mail { file("/home/syslog-ng/$YEAR/$HOST/maillog-$HOUR"); }; destination cron { file("/home/syslog-ng/$YEAR/$HOST/cron-$HOUR"); }; destination boot { file("/home/syslog-ng/$YEAR/$HOST/boot.log-$HOUR"); }; destination spooler { file("/home/syslog-ng/$YEAR/$HOST/spooler-$HOUR"); }; destination messages { file("/home/syslog-ng/$YEAR/$HOST/messages-$HOUR"); }; log { source(src); filter(f_kern); destination(kern); }; log { source(src); filter(f_authpriv); destination(authpriv); }; log { source(src); filter(f_mail); destination(mail); }; log { source(src); filter(f_cron); destination(cron); }; log { source(src); filter(f_boot); destination(boot); }; log { source(src); filter(f_spooler); destination(spooler); }; log { source(src); filter(f_messages); destination(messages); }; -----邮件原件----- 发件人: syslog-ng-bounces@lists.balabit.hu [mailto:syslog-ng-bounces@lists.balabit.hu] 代表 Balazs Scheidler 发送时间: 2007年9月25日 14:15 收件人: Syslog-ng users' and developers' mailing list 主题: Re: [syslog-ng] 答复: why dose the usage of mem by syslog-ng keep growing? On Tue, 2007-09-25 at 11:11 +0800, liuruihong wrote:
Here are the actual memory footprint of syslog-ng,ps`s output: Time interval : Mon Sep 24 18:55:01 to Tue Sep 25 10:50:01 root 26087 0.2 0.0 10604 5292 ? Ss 18:29 0:00 syslog-ng root 26087 0.1 0.0 10604 5292 ? Rs 18:29 0:00 syslog-ng root 26087 0.1 0.1 13988 8748 ? Ss 18:29 0:01 syslog-ng
This seems to be a lot indeed. Can you send us your configuration file to see what might be specific in your deployment? And could you also tell us the version of syslog-ng you are using? If this information is not enough to narrow down the problem I might need a core file of syslog-ng, but let's see the info first.
root 26087 0.1 0.1 17112 11804 ? Ss 18:29 0:02 syslog-ng Mon Sep 24 18:55:01 CST 2007 -- Bazsi
_______________________________________________ syslog-ng maillist - syslog-ng@lists.balabit.hu https://lists.balabit.hu/mailman/listinfo/syslog-ng Frequently asked questions at http://www.campin.net/syslog-ng/faq.html _______________________________________________ syslog-ng maillist - syslog-ng@lists.balabit.hu https://lists.balabit.hu/mailman/listinfo/syslog-ng Frequently asked questions at http://www.campin.net/syslog-ng/faq.html