[syslog-ng] increasing number of TCP connections from same number of remote hosts

[Nagy Daniel]

Hi,

It's syslog-ng v2.0.7 on RHEL4, compiled from source.
The system is a log server, it receives logs via TCP from
various clients.

After restarting syslog-ng, netstat -t shows that each remote
host open only one TCP connection to the server, which is normal.
The problem is, that the number of established TCP connections
is increasing constantly, but the number of clients is the same.


For example netstat -t --numeric-ports | grep fmx23 now shows:

tcp        0      0 barapp1:514
fmx23.freemail.privat:52391 ESTABLISHED
tcp        0      0 barapp1:514
fmx23.freemail.privat:50852 ESTABLISHED
tcp        0      0 barapp1:514
fmx23.freemail.privat:50172 ESTABLISHED
tcp        0      0 barapp1:514
fmx23.freemail.privat:59367 ESTABLISHED
tcp        0      0 barapp1:514
fmx23.freemail.privat:50979 ESTABLISHED
tcp        0      0 barapp1:514
fmx23.freemail.privat:55828 ESTABLISHED
tcp        0      0 barapp1:514
fmx23.freemail.privat:53013 ESTABLISHED
tcp        0      0 barapp1:514
fmx23.freemail.privat:50038 ESTABLISHED

Why is that? AFAIK there should be only one established connection
per client. Is it a server or client problem?

Thanks,

Daniel