[syslog-ng] [Bug 84] New: Program destination blocks if program stops reading input

[bugzilla at bugzilla.balabit.com]

https://bugzilla.balabit.com/show_bug.cgi?id=84

           Summary: Program destination blocks if program stops reading
                    input
           Product: syslog-ng
           Version: 3.0.x
          Platform: PC
        OS/Version: Linux
            Status: NEW
          Severity: major
          Priority: unspecified
         Component: syslog-ng
        AssignedTo: bazsi at balabit.hu
        ReportedBy: erempel at uvic.ca
Type of the Report: ---
   Estimated Hours: 0.0


Syslog-ng OSE 3.0.5 and 3.0.6 - binary download from balabit and self compiled all behave the same.

If the program in a destination stops reading its input, syslog-ng buffers a small number of messages
and then stops reading the source (in my case a pipe).

I would expect syslog-ng to read from its input until the log_fifo_size limit was reached and then drop messages.

an strace is attached.

The configuration file is
--------------
options {
        log_fifo_size(1000000);
        use_fqdn(yes);
        keep_hostname(yes);
        chain_hostnames(yes);
        time_reap(60);
        time_reopen(5);
        flush_lines(1000);
        flush_timeout(1000);
};

template t_application  { template("$MESSAGE\n"); template_escape(no); };
template t_localsyslog  { template("<$PRI>$S_ISODATE $HOST erempel: $MSGONLY\n"); template_escape(no); };

source local { pipe("/var/log/syslog.pipes/erempel" flags(no-parse) ); };
source int { internal(); };

destination localsyslog { tcp("localhost" port(1514) localip(localhost) template(t_localsyslog) log_fifo_size(5000) ); };
destination erempel { program("/home1l/erempel/read-noread.pl" template(t_application) log_fifo_size(8000000) ); };

log { source(local); destination(erempel); };
log { source(int); destination(localsyslog); };
----------------------


-- 
Configure bugmail: https://bugzilla.balabit.com/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are watching all bug changes.