[syslog-ng] Connections not closing on syslog-ng 2.1.4 server

[Robert Nickel]

On 2012.05.09 21:05:14 -0400, Patrick Hemmer wrote:
> Sent: Wed May 09 2012 20:45:58 GMT-0400 (EDT)
[...]
> >Usually, the actual number of connections is a couple of hundred above the
> >2048 number listed here. (netstat -an | fgrep -v ESTABLISHED | fgrep :5140).
[...]
> Firstly, I think your netstat command is incorrect. If youre trying
> to count the number of open connections, that command you gave does
> the opposite, it counts inactive connections :-)
> netstat -an | fgrep -v ESTABLISHED | fgrep :5140
> should be
> netstat -an | fgrep ESTABLISHED | fgrep :5140

Yeah. Oops. Good catch. That is not what I am using to gather the connections
and I inserted a typo.

Sorry.

fwiw: the actual command that I'm using is this:

  netstat -an | \
      awk '$4  ~ /:5140$/ && /ESTABLISHED/ { 
        gsub(":.*$","",$5); 
        print $5; 
        }' | tee /var/tmp/connections.txt | wc -l

The fgrep bit was a (failed) attempt to keep it simple.  *sigh*

> So with this, I'd check that you dont indeed have 2048 open
> connections from all your clients.

The number of connections was in excess of the maximum defined in the source.

Thank you,
--Robert