[syslog-ng] syslog-ng with sql() command, cpu to 100%

Garry De Toffoli dtgarry at hotmail.com
Wed Oct 7 15:22:23 CEST 2009



I have tried to use strace, and this is what is reported:

15:16:09.221845 execve("/opt/syslog-ng/sbin/syslog-ng", ["/opt/syslog-ng/sbin/syslog-ng", "-f", "/opt/syslog-ng/etc/syslog-ng.conf"], [/* 16 vars */]) = 0
15:16:09.232664 brk(0)                  = 0x83e2000
15:16:09.232971 access("/etc/ld.so.nohwcap", F_OK) = -1 ENOENT (No such file or directory)
15:16:09.233274 mmap2(NULL, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb801d000
15:16:09.233520 access("/etc/ld.so.preload", R_OK) = -1 ENOENT (No such file or directory)
15:16:09.233717 open("/opt/syslog-ng/lib/tls/i686/sse2/cmov/libc.so.6", O_RDONLY) = -1 ENOENT (No such file or directory)
15:16:09.236940 stat64("/opt/syslog-ng/lib/tls/i686/sse2/cmov", 0xbf83a9e0) = -1 ENOENT (No such file or directory)
15:16:09.237178 open("/opt/syslog-ng/lib/tls/i686/sse2/libc.so.6", O_RDONLY) = -1 ENOENT (No such file or directory


and it is looping with these error messages:
15:16:09.237751 stat64("/opt/syslog-ng/lib/tls/i686/cmov", 0xbf83a9e0) = -1 ENOENT (No such file or directory)
15:16:09.237930 open("/opt/syslog-ng/lib/tls/i686/libc.so.6", O_RDONLY) = -1 ENOENT (No such file or directory)
15:16:09.238125 stat64("/opt/syslog-ng/lib/tls/i686", 0xbf83a9e0) = -1 ENOENT (No such file or directory)
15:16:09.238296 open("/opt/syslog-ng/lib/tls/sse2/cmov/libc.so.6", O_RDONLY) = -1 ENOENT (No such file or directory)
15:16:09.238488 stat64("/opt/syslog-ng/lib/tls/sse2/cmov", 0xbf83a9e0) = -1 ENOENT (No such file or directory)


On my Linux box there is no /etc/ld.so.nohwcap, and there is no "tls" path under the "lib" path of syslog-ng

I have used the compiled version of syslog-ng

./syslog-ng -V
syslog-ng 3.0.4
Revision: ssh+git://bazsi@git.balabit//var/scm/git/syslog-ng/syslog-ng-ose--mainline--3.0#master#1b5d618e301ad94aa20e692ffba16469dece8d10
Compile-Date: Aug  5 2009 17:38:20
Enable-Threads: on
Enable-Debug: off
Enable-GProf: off
Enable-Memtrace: off
Enable-Sun-STREAMS: off
Enable-Sun-Door: off
Enable-IPv6: on
Enable-Spoof-Source: on
Enable-TCP-Wrapper: off
Enable-SSL: on
Enable-SQL: on
Enable-Linux-Caps: on
Enable-Pcre: off

Thank you


> ----------------------------------------------------------------------
> 
> Message: 1
> Date: Wed, 7 Oct 2009 11:36:17 +0200
> From: Sandor Geller <Sandor.Geller at morganstanley.com>
> Subject: Re: [syslog-ng] syslog-ng with sql() command, cpu to 100%
> To: "Syslog-ng users' and developers' mailing list"
> 	<syslog-ng at lists.balabit.hu>
> Message-ID:
> 	<edabd2010910070236h460880edp4e824905927d9883 at mail.gmail.com>
> Content-Type: text/plain; charset=ISO-8859-1
> 
> Hi,
> 
> > it seems that the sql() statement go in loop;
> >
> > where is the error?
> 
> Could you attach strace on syslog-ng, preferably restarting syslog-ng
> under strace? Something like
> 
> strace -ff -tt -s 128 -p <PID of running syslog-ng> -o syslogstrace
> 
> In the resulting files you could either find the cause of the problem,
> or you could send us some details about what's going on.
> 
> Regards,
> 
> Sandor
> 
> 
> ------------------------------
> 
> _______________________________________________
> syslog-ng maillist  -  syslog-ng at lists.balabit.hu
> https://lists.balabit.hu/mailman/listinfo/syslog-ng
> 
> 
> End of syslog-ng Digest, Vol 54, Issue 7
> ****************************************
 		 	   		  
_________________________________________________________________
Gossip, Sport, Notizie... Accendi la Messenger TV!
http://www.messenger.it/messengerTV.aspx
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.balabit.hu/pipermail/syslog-ng/attachments/20091007/890dab06/attachment.htm 


More information about the syslog-ng mailing list