[PATCH] syslogd hangs

From: Andrew J. Korty (ajk@iu.edu)
Date: 04/24/01


Date: Tue, 24 Apr 2001 08:07:01 -0500 (EST)
From: "Andrew J. Korty" <ajk@iu.edu>
To: <freebsd-security@freebsd.org>

Several months ago someone on -security was complaining about syslogd
hanging when logging from remote hosts. I've since been affected by
the problem myself and looked into it closely.

It appears syslogd is suffering from a problem with the way the
resolver handles interrupted kevent() calls. This problem was fixed
back when the resolver used poll(), but the fix was not retained when
refactoring with kqueue()/kevent().

I've submitted a bug report and patch, bin/26665. Please take a look.
Thanks!

-- 
Andrew J. Korty, Principal Security Engineer, GCIA
Office of the Vice President for Information Technology
Indiana University
To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message


Relevant Pages

  • RE: Logging Stops after few minutes
    ... are you sure that syslogd stops working after only 2 ... Syslogd only chews on the processor when it has something to do. ... If you're certain that it isn't logging events that it should: ... If you look at my FTP command it should ...
    (freebsd-questions)
  • Re: syslogd spinning the CPU, not logging...
    ... Something triggers syslogd into spinning all available CPU -- while ... not logging anything. ... I'm not sure how the process is actually spinning (100% CPU). ...
    (freebsd-stable)
  • Re: syslogd question (modifying syslogd.c)
    ... Solaris seems to have more feature-full logging facilities. ... And in 'syslogd': ... by an identifier in the following format: ... In syslog, the logging priority ...
    (RedHat)
  • Re: Logging TCP events
    ... sending those events to syslogd. ... syslogd is a relatively slow logging mechanism, ... Syslog-NG can use TCP connectivity (I use it to SSH tunnel logging ... either the IPTABLES definitions or if doing the TCPDUMP, ...
    (comp.security.firewalls)
  • Re: remote syslog
    ... To enable this [network logging on the server] you have to specify the ... The default behavior is that syslogd ...
    (Fedora)