From owner-freebsd-questions@FreeBSD.ORG  Mon Mar 27 15:42:28 2006
Return-Path: <owner-freebsd-questions@FreeBSD.ORG>
X-Original-To: questions@freebsd.org
Delivered-To: freebsd-questions@FreeBSD.ORG
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id 450E516A401
	for <questions@freebsd.org>; Mon, 27 Mar 2006 15:42:28 +0000 (UTC)
	(envelope-from mwlucas@bewilderbeast.blackhelicopters.org)
Received: from bewilderbeast.blackhelicopters.org
	(bewilderbeast.blackhelicopters.org [198.22.63.43])
	by mx1.FreeBSD.org (Postfix) with ESMTP id BC42043D45
	for <questions@freebsd.org>; Mon, 27 Mar 2006 15:42:27 +0000 (GMT)
	(envelope-from mwlucas@bewilderbeast.blackhelicopters.org)
Received: from bewilderbeast.blackhelicopters.org (mwlucas@localhost
	[127.0.0.1])
	by bewilderbeast.blackhelicopters.org (8.12.10/8.12.10) with ESMTP id
	k2RFgQWG057575; Mon, 27 Mar 2006 10:42:26 -0500 (EST)
	(envelope-from mwlucas@bewilderbeast.blackhelicopters.org)
Received: (from mwlucas@localhost)
	by bewilderbeast.blackhelicopters.org (8.12.10/8.12.10/Submit) id
	k2RFgQGm057574; Mon, 27 Mar 2006 10:42:26 -0500 (EST)
	(envelope-from mwlucas)
Date: Mon, 27 Mar 2006 10:42:26 -0500
From: "Michael W. Lucas" <mwlucas@blackhelicopters.org>
To: Chuck Swiger <cswiger@mac.com>
Message-ID: <20060327154226.GA57547@bewilderbeast.blackhelicopters.org>
References: <20060324211741.GA40819@bewilderbeast.blackhelicopters.org>
	<83E0BC22-BFFA-47EE-88DA-D6A5D1862081@mac.com>
	<20060327145102.GA57216@bewilderbeast.blackhelicopters.org>
	<4428032A.2030404@mac.com>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <4428032A.2030404@mac.com>
User-Agent: Mutt/1.4.1i
X-Spam-Score: (0) 
X-Scanned-By: MIMEDefang 2.39
Cc: questions@freebsd.org, "Michael W. Lucas" <mwlucas@blackhelicopters.org>
Subject: Re: filling up UDP socket buffers like mad
X-BeenThere: freebsd-questions@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: User questions <freebsd-questions.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
	<mailto:freebsd-questions-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-questions>
List-Post: <mailto:freebsd-questions@freebsd.org>
List-Help: <mailto:freebsd-questions-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
	<mailto:freebsd-questions-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Mon, 27 Mar 2006 15:42:28 -0000

On Mon, Mar 27, 2006 at 10:22:18AM -0500, Chuck Swiger wrote:
> Michael W. Lucas wrote:
> > On Fri, Mar 24, 2006 at 06:03:47PM -0500, Charles Swiger wrote:
> [ ... ]
> > udp4   43414      0  *.514                  *.*                    
> > udp4       0      0  *.49661                *.*    
> > ...
> > 
> > We have no firewall on this machine; it's buried behind three layers
> > of firewall.
> 
> Heh.  :-)  Well, it's pretty clear that the syslog traffic isn't being drained
> by the syslog daemon properly.  I've seen syslogd get stuck like that if it was
> forwarding logs to another host specified by name and not IP, and it was having
> problems resolving it.

This *is* the loghost other hosts are forwarding their logs to.  So,
I'm pretty sure that's not it.  :-)

==ml

-- 
Michael W. Lucas	mwlucas@FreeBSD.org, mwlucas@BlackHelicopters.org
		http://www.BlackHelicopters.org/~mwlucas/

"The cloak of anonymity protects me from the nuisance of caring." -Non Sequitur