[syslog-ng]Syslog-NG 1.6.6 memory leak when sending UDP logs

Mon, 28 Feb 2005 13:49:49 -0500

This is a multipart message in MIME format.
--=_alternative 00678AB785256FB6_=
Content-Type: text/plain; charset="US-ASCII"

Fair enough. 
I've disabled udp spoof, but am keeping forwarding turned on -  it seems 
to have plugged the hole.  One of the major reasons for using syslong-ng 
is the spoofing feature.  I look forward to getting to the cause. 

# Sets up forwarding to other hosts 
destination loghostd { udp(loghostd); }; 
destination loghosta { udp(loghosta); }; 
destination scribe02 { udp(scribe02); }; 

Balazs Scheidler <bazsi@balabit.hu> 
Sent by: syslog-ng-admin@lists.balabit.hu
02/28/2005 01:28 PM
Please respond to
syslog-ng@lists.balabit.hu

To
syslog-ng@lists.balabit.hu
cc

Subject
Re: [syslog-ng]Syslog-NG 1.6.6 memory leak when sending UDP logs

On Mon, 2005-02-28 at 11:34 -0500, henry@shoelacecity.com wrote:
> 
> No sooner did I write this that ElectricFence reported back (after 2
> hours of uptime): 
> 
> "ElectricFence: Exiting: mprotect() failed: Cannot allocate memory" 

the workaround probably is to disable spoof-source if you can do that in
your infrastructure, it seems to be related to that function, I can have
a closer look tomorrow.

-- 
Bazsi

_______________________________________________
syslog-ng maillist  -  syslog-ng@lists.balabit.hu
https://lists.balabit.hu/mailman/listinfo/syslog-ng
Frequently asked questions at http://www.campin.net/syslog-ng/faq.html

--=_alternative 00678AB785256FB6_=
Content-Type: text/html; charset="US-ASCII"

<br><font size=2 face="sans-serif">Fair enough. </font>
<br><font size=2 face="sans-serif">I've disabled udp spoof, but am keeping
forwarding turned on - &nbsp;it seems to have plugged the hole. &nbsp;One
of the major reasons for using syslong-ng is the spoofing feature. &nbsp;I
look forward to getting to the cause. </font>
<br>
<br><font size=2 face="sans-serif"># Sets up forwarding to other hosts</font><font size=3>
</font><font size=2 face="sans-serif"><br>
destination loghostd { udp(loghostd); };</font><font size=3> </font><font size=2 face="sans-serif"><br>
destination loghosta { udp(loghosta); };</font><font size=3> </font><font size=2 face="sans-serif"><br>
destination scribe02 { udp(scribe02); };</font><font size=3> </font>
<br>
<br>
<br>
<br>
<br>
<br>
<table width=100%>
<tr valign=top>
<td width=40%><font size=1 face="sans-serif"><b>Balazs Scheidler &lt;bazsi@balabit.hu&gt;</b>
</font>
<br><font size=1 face="sans-serif">Sent by: syslog-ng-admin@lists.balabit.hu</font>
<p><font size=1 face="sans-serif">02/28/2005 01:28 PM</font>
<table border>
<tr valign=top>
<td bgcolor=white>
<div align=center><font size=1 face="sans-serif">Please respond to<br>
syslog-ng@lists.balabit.hu</font></div></table>
<br>
<td width=59%>
<table width=100%>
<tr>
<td>
<div align=right><font size=1 face="sans-serif">To</font></div>
<td valign=top><font size=1 face="sans-serif">syslog-ng@lists.balabit.hu</font>
<tr>
<td>
<div align=right><font size=1 face="sans-serif">cc</font></div>
<td valign=top>
<tr>
<td>
<div align=right><font size=1 face="sans-serif">Subject</font></div>
<td valign=top><font size=1 face="sans-serif">Re: [syslog-ng]Syslog-NG
1.6.6 memory leak when sending UDP logs</font></table>
<br>
<table>
<tr valign=top>
<td>
<td></table>
<br></table>
<br>
<br>
<br><font size=2><tt>On Mon, 2005-02-28 at 11:34 -0500, henry@shoelacecity.com
wrote:<br>
&gt; <br>
&gt; No sooner did I write this that ElectricFence reported back (after
2<br>
&gt; hours of uptime): <br>
&gt; <br>
&gt; &quot;ElectricFence: Exiting: mprotect() failed: Cannot allocate memory&quot;
<br>
<br>
the workaround probably is to disable spoof-source if you can do that in<br>
your infrastructure, it seems to be related to that function, I can have<br>
a closer look tomorrow.<br>
<br>
-- <br>
Bazsi<br>
<br>
<br>
_______________________________________________<br>
syslog-ng maillist &nbsp;- &nbsp;syslog-ng@lists.balabit.hu<br>
https://lists.balabit.hu/mailman/listinfo/syslog-ng<br>
Frequently asked questions at http://www.campin.net/syslog-ng/faq.html<br>
<br>
</tt></font>
<br>
--=_alternative 00678AB785256FB6_=--