Hi all,

after some struggle, a new status: Thanks to David's data sets, I think I
have finally been able to find a code spot that may be troublesome. It also
is in an area that we already had under suspicion. While it is too early to
say if I finally found the issue, it looks very promising. 

If I am right, the problem is actually environment-induced, what would also
explain why other users did not yet report anything and I did not see
anything in my lab so far. The ultimate root cause may even be a formatting
error in another rsyslogd instance further up in the relay chain. If so, I'll
try to work upward from where to problem currently occurs to the above-it
root cause.

I just thought I share this new information with you.

Rainer

> -----Original Message-----
> From: [email protected] [mailto:rsyslog-
> [email protected]] On Behalf Of Rainer Gerhards
> Sent: Thursday, September 03, 2009 12:24 PM
> To: rsyslog-users
> Subject: Re: [rsyslog] abort in 4.2.1
> 
> Hi David,
> 
> > I haven't gone back to the 3.x series, but I did several more runs
> with
> > 4.2.0 doing the folloiwng
> >
> > killall syslogd; tcpdump -n -s 0 -w rsyslog.sniff-10 -i eth0 &
> > rsyslogd -c4 -x -d >rsyslog.debug-10 2>&1 ; killall tcpdump; syslogd
> -r
> > -h ; mv /core /core-4.2.0-10
> >
> > I have several complete steps, as well as several partial sets of
> data.
> > I
> > will gzip them and attempt to send them to you directly.
> 
> Thanks for the data set, I am right now working on it. Unfortunately,
> as I
> feared, the core files do not really help. There is a big mismatch
> between
> your system environment and mine, and so gdb is not able to extract any
> useful information. All I see is that there are six threads in the
> system,
> and the rest is almost only question marks.
> 
> So it would be great if you could issue the gdb commands in your
> environment
> and let me know the outcome.
> 
> Thanks,
> Rainer
> _______________________________________________
> rsyslog mailing list
> http://lists.adiscon.net/mailman/listinfo/rsyslog
> http://www.rsyslog.com
_______________________________________________
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com

Reply via email to