[syslog-ng]Syslog-NG 1.6.6 memory leak when sending UDP logs
syslog-ng@lists.balabit.hu
syslog-ng@lists.balabit.hu
Mon, 28 Feb 2005 14:59:55 -0500
This is a multipart message in MIME format.
--=_alternative 006DF5C585256FB6_=
Content-Type: text/plain; charset="ISO-8859-1"
Content-Transfer-Encoding: quoted-printable
That seems to have done the trick - I still see some small amount of=20
memory consumption over time, but nowhere near the rate it was at before=20
your suggestion. I'll monitor it overnight and see if it hits a plateau.=20
But now, I think it's time for some p=E1linka!
Henry -
Balazs Scheidler <bazsi@balabit.hu>=20
Sent by: syslog-ng-admin@lists.balabit.hu
02/28/2005 02:19 PM
Please respond to
syslog-ng@lists.balabit.hu
To
syslog-ng@lists.balabit.hu
cc
Subject
Re: [syslog-ng]Syslog-NG 1.6.6 memory leak when sending UDP logs
On Mon, 2005-02-28 at 13:49 -0500, henry@shoelacecity.com wrote:
>=20
> Fair enough.=20
> I've disabled udp spoof, but am keeping forwarding turned on - it
> seems to have plugged the hole. One of the major reasons for using
> syslong-ng is the spoofing feature. I look forward to getting to the
> cause.=20
Can you check if this simple one-liner solves the problem? (if you don't
have scsh, touch afinet.c.x after applying the patch to satisfy build
dependencies)
diff -u -r1.25.4.6 afinet.c
--- afinet.c 5 Aug 2004 11:35:12 -0000 1.25.4.6
+++ afinet.c 28 Feb 2005 19:17:30 -0000
@@ -653,6 +653,7 @@
if (libnet=5Fwrite(self->lnet=5Fctx) < 0) {
werror("Error sending raw frame, error:=20
%z", libnet=5Fgeterror(self->lnet=5Fctx));
}
+ ol=5Fstring=5Ffree(msg=5Fline);
}
else {
fallback=5Fsocket:
--=20
Bazsi
=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=
=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F
syslog-ng maillist - syslog-ng@lists.balabit.hu
https://lists.balabit.hu/mailman/listinfo/syslog-ng
Frequently asked questions at http://www.campin.net/syslog-ng/faq.html
--=_alternative 006DF5C585256FB6_=
Content-Type: text/html; charset="ISO-8859-1"
Content-Transfer-Encoding: quoted-printable
<br><font size=3D2 face=3D"sans-serif">That seems to have done the trick -
I still see some small amount of memory consumption over time, but
nowhere near the rate it was at before your suggestion. I'll monitor it
overnight and see if it hits a plateau. </font>
<br><font size=3D2 face=3D"sans-serif">But now, I think it's time for some
p=E1linka!</font>
<br>
<br><font size=3D2 face=3D"sans-serif">Henry -</font>
<br>
<br>
<br>
<table width=3D100%>
<tr valign=3Dtop>
<td width=3D40%><font size=3D1 face=3D"sans-serif"><b>Balazs Scheidler <=
bazsi@balabit.hu></b>
</font>
<br><font size=3D1 face=3D"sans-serif">Sent by: syslog-ng-admin@lists.balab=
it.hu</font>
<p><font size=3D1 face=3D"sans-serif">02/28/2005 02:19 PM</font>
<table border>
<tr valign=3Dtop>
<td bgcolor=3Dwhite>
<div align=3Dcenter><font size=3D1 face=3D"sans-serif">Please respond to<br>
syslog-ng@lists.balabit.hu</font></div></table>
<br>
<td width=3D59%>
<table width=3D100%>
<tr>
<td>
<div align=3Dright><font size=3D1 face=3D"sans-serif">To</font></div>
<td valign=3Dtop><font size=3D1 face=3D"sans-serif">syslog-ng@lists.balabit=
.hu</font>
<tr>
<td>
<div align=3Dright><font size=3D1 face=3D"sans-serif">cc</font></div>
<td valign=3Dtop>
<tr>
<td>
<div align=3Dright><font size=3D1 face=3D"sans-serif">Subject</font></div>
<td valign=3Dtop><font size=3D1 face=3D"sans-serif">Re: [syslog-ng]Syslog-NG
1.6.6 memory leak when sending UDP logs</font></table>
<br>
<table>
<tr valign=3Dtop>
<td>
<td></table>
<br></table>
<br>
<br>
<br><font size=3D2><tt>On Mon, 2005-02-28 at 13:49 -0500, henry@shoelacecit=
y.com
wrote:<br>
> <br>
> Fair enough. <br>
> I've disabled udp spoof, but am keeping forwarding turned on - i=
t<br>
> seems to have plugged the hole. One of the major reasons for
using<br>
> syslong-ng is the spoofing feature. I look forward to getting
to the<br>
> cause. <br>
<br>
Can you check if this simple one-liner solves the problem? (if you don't<br>
have scsh, touch afinet.c.x after applying the patch to satisfy build<br>
dependencies)<br>
<br>
diff -u -r1.25.4.6 afinet.c<br>
--- afinet.c 5 Aug 2004 11:35:12 -0000
1.25.4.6<br>
+++ afinet.c 28 Feb 2005 19:17:30 -0000<br>
@@ -653,6 +653,7 @@<br>
if (libnet=5Fwrite(self->lnet=5Fctx) < 0) {<br>
werror("Error sending raw
frame, error: %z", libnet=5Fgeterror(self->lnet=5Fctx));<br>
}<br>
+
ol=5Fstring=5Ffree(msg=5Fline);<br>
}<br>
else {<br>
fallback=5Fsocket:<=
br>
<br>
-- <br>
Bazsi<br>
<br>
<br>
=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=
=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F<br>
syslog-ng maillist - syslog-ng@lists.balabit.hu<br>
https://lists.balabit.hu/mailman/listinfo/syslog-ng<br>
Frequently asked questions at http://www.campin.net/syslog-ng/faq.html<br>
<br>
</tt></font>
<br>
--=_alternative 006DF5C585256FB6_=--