In article <20021010152652.GA12473@balabit.hu>, Balazs Scheidler <bazsi@balabit.hu> wrote; } from my box. It's still up and running. I'll now add another TCP source } which is not dropped after each message. (though the script above should } stress syslog-ng much more) Is it helpful to define DEBUG_ALLOC and REALLY_DEBUG_ALLOC to see what is going on? -- Katsuhiro Kondou