8 Aug
2000
8 Aug
'00
6:34 p.m.
Nate Campi on Thu 3/08 22:16 -0700:
The last leak I fixed in 1.4.5 was caused by UDP destinations, if the receiving host was not accepting messages on the given port. (e.g. ICMP destination unreachable is returned) If you don't use udp() destinations it doesn't show up.
Actually, now that you mention it, the stable host isn't doing any TCP connections, but the unstable ones are doing TCP connections exclusively.
The TCP connections would seem to the culprit.
Simple TCP forwarding (no local logging) seems to work fine, if they are only forwarding from UDP sources. A syslog-ng process doing TCP receiving seems to leak, but I plan on doing some testing to gather more data within a couple of weeks.