[syslog-ng]Syslog-NG 1.6.6 memory leak when sending UDP logs

syslog-ng@lists.balabit.hu syslog-ng@lists.balabit.hu
Wed, 2 Mar 2005 11:01:25 -0500


This is a multipart message in MIME format.
--=_alternative 005820E985256FB8_=
Content-Type: text/plain; charset="US-ASCII"

I  "ElectricFenced" it instead of valgrinding it.   Efence did not detect 
any "problems" until it "ran out of memeory".   I'll give valgrind a shot.





Roberto Nibali <ratz@tac.ch> 
Sent by: syslog-ng-admin@lists.balabit.hu
03/02/2005 10:13 AM
Please respond to
syslog-ng@lists.balabit.hu


To
syslog-ng@lists.balabit.hu
cc

Subject
Re: [syslog-ng]Syslog-NG 1.6.6 memory leak when sending UDP logs






henry@shoelacecity.com wrote:
> 
> Let me understand this, you were seeing a leak when using a PERL script
> to send UDP packets using
> Net::RawIP    _to_ syslong_ng.

Exact, the perl-related process was leaking, no syslog involved. We had to
hand-craft the UDP packets since the spoofing only works partially from 
our POV.

> I am still experiencing clear leak behavior when using syslog-ng to send
> spoffed UDP packets to other syslog-ng's.
> The syslog-ng sender is leaking, the receiver is exhibitning normal
> behavior.

You could valgrind the process ... http://valgrind.kde.org/

Sorry for not being more helpful to you in this matter,
Roberto Nibali, ratz
-- 
-------------------------------------------------------------
addr://Rathausgasse 31, CH-5001 Aarau  tel://++41 62 823 9355
http://www.terreactive.com             fax://++41 62 823 9356
-------------------------------------------------------------
terreActive AG                       Wir sichern Ihren Erfolg
-------------------------------------------------------------
_______________________________________________
syslog-ng maillist  -  syslog-ng@lists.balabit.hu
https://lists.balabit.hu/mailman/listinfo/syslog-ng
Frequently asked questions at http://www.campin.net/syslog-ng/faq.html



--=_alternative 005820E985256FB8_=
Content-Type: text/html; charset="US-ASCII"


<br><font size=2 face="sans-serif">I &nbsp;&quot;ElectricFenced&quot; it
instead of valgrinding it. &nbsp; Efence did not detect any &quot;problems&quot;
until it &quot;ran out of memeory&quot;. &nbsp; I'll give valgrind a shot.</font>
<br>
<br>
<br>
<br>
<br>
<table width=100%>
<tr valign=top>
<td width=40%><font size=1 face="sans-serif"><b>Roberto Nibali &lt;ratz@tac.ch&gt;</b>
</font>
<br><font size=1 face="sans-serif">Sent by: syslog-ng-admin@lists.balabit.hu</font>
<p><font size=1 face="sans-serif">03/02/2005 10:13 AM</font>
<table border>
<tr valign=top>
<td bgcolor=white>
<div align=center><font size=1 face="sans-serif">Please respond to<br>
syslog-ng@lists.balabit.hu</font></div></table>
<br>
<td width=59%>
<table width=100%>
<tr>
<td>
<div align=right><font size=1 face="sans-serif">To</font></div>
<td valign=top><font size=1 face="sans-serif">syslog-ng@lists.balabit.hu</font>
<tr>
<td>
<div align=right><font size=1 face="sans-serif">cc</font></div>
<td valign=top>
<tr>
<td>
<div align=right><font size=1 face="sans-serif">Subject</font></div>
<td valign=top><font size=1 face="sans-serif">Re: [syslog-ng]Syslog-NG
1.6.6 memory leak when sending UDP logs</font></table>
<br>
<table>
<tr valign=top>
<td>
<td></table>
<br></table>
<br>
<br>
<br><font size=2><tt>henry@shoelacecity.com wrote:<br>
&gt; <br>
&gt; Let me understand this, you were seeing a leak when using a PERL script<br>
&gt; to send UDP packets using<br>
&gt; Net::RawIP &nbsp; &nbsp;_to_ syslong_ng.<br>
<br>
Exact, the perl-related process was leaking, no syslog involved. We had
to<br>
hand-craft the UDP packets since the spoofing only works partially from
our POV.<br>
<br>
&gt; I am still experiencing clear leak behavior when using syslog-ng to
send<br>
&gt; spoffed UDP packets to other syslog-ng's.<br>
&gt; The syslog-ng sender is leaking, the receiver is exhibitning normal<br>
&gt; behavior.<br>
<br>
You could valgrind the process ... http://valgrind.kde.org/<br>
<br>
Sorry for not being more helpful to you in this matter,<br>
Roberto Nibali, ratz<br>
-- <br>
-------------------------------------------------------------<br>
addr://Rathausgasse 31, CH-5001 Aarau &nbsp;tel://++41 62 823 9355<br>
http://www.terreactive.com &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; fax://++41
62 823 9356<br>
-------------------------------------------------------------<br>
terreActive AG &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;
&nbsp; &nbsp; &nbsp; Wir sichern Ihren Erfolg<br>
-------------------------------------------------------------<br>
_______________________________________________<br>
syslog-ng maillist &nbsp;- &nbsp;syslog-ng@lists.balabit.hu<br>
https://lists.balabit.hu/mailman/listinfo/syslog-ng<br>
Frequently asked questions at http://www.campin.net/syslog-ng/faq.html<br>
<br>
</tt></font>
<br>
--=_alternative 005820E985256FB8_=--