Bug 7897

Summary: memory leak in syslogd?
Product: [Retired] Red Hat Linux Reporter: simon.mudd
Component: sysklogdAssignee: Bill Nottingham <notting>
Status: CLOSED CURRENTRELEASE QA Contact:
Severity: medium Docs Contact:
Priority: medium    
Version: 6.0CC: rvokal
Target Milestone: ---   
Target Release: ---   
Hardware: i386   
OS: Linux   
Whiteboard:
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 1999-12-20 16:54:07 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:

Description simon.mudd 1999-12-20 10:18:28 UTC
I'm running redhat 6.0 with some changes.  The syslog package logs
from other firewall machines.  I haven't checked 6.1's sysklogd, but it
seems to be the same version as 6.0's.

ps auxw | grep syslog shows:

root      4639  0.0 34.9 114484 44816 ?      S    Nov24  14:46 syslogd -m 0
-r -s alltrading.es

and top shows
  PID USER     PRI  NI  SIZE  RSS SHARE STAT  LIB %CPU %MEM   TIME COMMAND
 4639 root       2   0  110M  43M   348 S       0  0.0 34.9  14:46 syslogd

[root@mail3 /root]# rpm -q sysklogd redhat-release
sysklogd-1.3.31-12
redhat-release-6.0-1
[root@mail3 /root]# rpm -V sysklogd
S.5....T c /etc/logrotate.d/syslog
S.5....T c /etc/rc.d/init.d/syslog
S.5....T c /etc/syslog.conf
[root@mail3 /root]#

/etc/syslog.conf (pasted from vi)
# Log all kernel messages to the console.
# Logging much else clutters up the screen.
#kern.*                                                 /dev/console

# Log anything (except mail) of level info or higher.
# Don't log private authentication messages!
*.info;mail.none;news.none;authpriv.none
/var/log/messages

# The authpriv file has restricted access.
authpriv.*                                              /var/log/secure

# Log all the mail messages in one place.
mail.*                                                  -/var/log/maillog

# log to local0 all router information
local0.*                                                /var/log/router

# Everybody gets emergency messages, plus log them on another
# machine.
*.emerg                                                 *

# Save mail and news errors of level err and higher in a
# special file.
uucp,news.crit                                          /var/log/spooler

# Save boot messages also to boot.log
local7.*                                                /var/log/boot.log

#
# INN
#
news.=crit                                        /var/log/news/news.crit
news.=err                                         /var/log/news/news.err
news.notice                                       /var/log/news/news.notice

daemon.*,local2.*                               /var/log/ppp

/etc/rc.d/init.d/syslog has the following change:

        # daemon syslogd -m 0
        daemon syslogd -m 0 -r -s alltrading.es

More information on request.

Comment 1 Bill Nottingham 1999-12-20 16:54:59 UTC
Upgrade your glibc (to the one in 6.1, for example), or turn off NIS+ in
/etc/nsswitch.conf. That's where the memory leak is...