I let it run over night with Balazs' "patch". It's been running for about 20 hours, and it is still leaking memory - in the past 20 hours, it's up to 384 mb consumed.   It seems to be a little slower, but that could be subjective on the amount of log traffic. Either way, it still exists.




Roberto Nibali <ratz@drugphish.ch>
Sent by: syslog-ng-admin@lists.balabit.hu

03/01/2005 03:06 AM
Please respond to
syslog-ng@lists.balabit.hu

To
syslog-ng@lists.balabit.hu
cc
Subject
Re: [syslog-ng]Syslog-NG 1.6.6 memory leak when sending UDP logs





Hello,

> Can you check if this simple one-liner solves the problem? (if you don't
> have scsh, touch afinet.c.x after applying the patch to satisfy build
> dependencies)
>
> diff -u -r1.25.4.6 afinet.c
> --- afinet.c    5 Aug 2004 11:35:12 -0000       1.25.4.6
> +++ afinet.c    28 Feb 2005 19:17:30 -0000
> @@ -653,6 +653,7 @@
>                         if (libnet_write(self->lnet_ctx) < 0) {
>                                 werror("Error sending raw frame, error: %z", libnet_geterror(self->lnet_ctx));
>                         }
> +                       ol_string_free(msg_line);
>                 }
>                 else {
>                 fallback_socket:

It looks very much like a leak. As I've heard last week from our
development team, they seem to have seen similar massive leaks when
using UDP spoofing. But I need to confirm that first. I'll let you know
tomorrow or the latest by next Wednesday.

The leak manifested itself when calling syslog() over a perl script or
something similar, I don't exactly remember. The gross and I/O intesive
solution was to fork()+exec(), but that's what you have SMP machines
for, right? :).

Thanks,
Roberto Nibali, ratz
--
echo '[q]sa[ln0=aln256%Pln256/snlbx]sb3135071790101768542287578439snlbxq'|dc
_______________________________________________
syslog-ng maillist  -  syslog-ng@lists.balabit.hu
https://lists.balabit.hu/mailman/listinfo/syslog-ng
Frequently asked questions at http://www.campin.net/syslog-ng/faq.html