From owner-freebsd-questions@FreeBSD.ORG Mon Mar 27 15:22:18 2006 Return-Path: X-Original-To: questions@freebsd.org Delivered-To: freebsd-questions@FreeBSD.ORG Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id D194916A401 for ; Mon, 27 Mar 2006 15:22:18 +0000 (UTC) (envelope-from cswiger@mac.com) Received: from pi.codefab.com (pi.codefab.com [199.103.21.227]) by mx1.FreeBSD.org (Postfix) with ESMTP id 6C0CE43D45 for ; Mon, 27 Mar 2006 15:22:18 +0000 (GMT) (envelope-from cswiger@mac.com) Received: from localhost (localhost [127.0.0.1]) by pi.codefab.com (Postfix) with ESMTP id AD2B05D8E; Mon, 27 Mar 2006 10:22:17 -0500 (EST) Received: from pi.codefab.com ([127.0.0.1]) by localhost (pi.codefab.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 11580-06; Mon, 27 Mar 2006 10:22:17 -0500 (EST) Received: from [192.168.1.3] (pool-68-160-194-11.ny325.east.verizon.net [68.160.194.11]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by pi.codefab.com (Postfix) with ESMTP id A7B9A5D7B; Mon, 27 Mar 2006 10:22:16 -0500 (EST) Message-ID: <4428032A.2030404@mac.com> Date: Mon, 27 Mar 2006 10:22:18 -0500 From: Chuck Swiger Organization: The Courts of Chaos User-Agent: Thunderbird 1.5 (Windows/20051201) MIME-Version: 1.0 To: "Michael W. Lucas" References: <20060324211741.GA40819@bewilderbeast.blackhelicopters.org> <83E0BC22-BFFA-47EE-88DA-D6A5D1862081@mac.com> <20060327145102.GA57216@bewilderbeast.blackhelicopters.org> In-Reply-To: <20060327145102.GA57216@bewilderbeast.blackhelicopters.org> X-Enigmail-Version: 0.94.0.0 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit X-Virus-Scanned: amavisd-new at codefab.com Cc: questions@freebsd.org Subject: Re: filling up UDP socket buffers like mad X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 27 Mar 2006 15:22:18 -0000 Michael W. Lucas wrote: > On Fri, Mar 24, 2006 at 06:03:47PM -0500, Charles Swiger wrote: [ ... ] > udp4 43414 0 *.514 *.* > udp4 0 0 *.49661 *.* > ... > > We have no firewall on this machine; it's buried behind three layers > of firewall. Heh. :-) Well, it's pretty clear that the syslog traffic isn't being drained by the syslog daemon properly. I've seen syslogd get stuck like that if it was forwarding logs to another host specified by name and not IP, and it was having problems resolving it. [ I've got a MacOS X 10.2(.9?) machine where syslogd is frozen upon boot now due to using a non-local hostname to forward one specific type of traffic elsewhere, so I have to kill -9 it and restart it by hand once the resolver has gotten going, if I reboot that machine. ] -- -Chuck