Hi all, after some struggle, a new status: Thanks to David's data sets, I think I have finally been able to find a code spot that may be troublesome. It also is in an area that we already had under suspicion. While it is too early to say if I finally found the issue, it looks very promising.
If I am right, the problem is actually environment-induced, what would also explain why other users did not yet report anything and I did not see anything in my lab so far. The ultimate root cause may even be a formatting error in another rsyslogd instance further up in the relay chain. If so, I'll try to work upward from where to problem currently occurs to the above-it root cause. I just thought I share this new information with you. Rainer > -----Original Message----- > From: [email protected] [mailto:rsyslog- > [email protected]] On Behalf Of Rainer Gerhards > Sent: Thursday, September 03, 2009 12:24 PM > To: rsyslog-users > Subject: Re: [rsyslog] abort in 4.2.1 > > Hi David, > > > I haven't gone back to the 3.x series, but I did several more runs > with > > 4.2.0 doing the folloiwng > > > > killall syslogd; tcpdump -n -s 0 -w rsyslog.sniff-10 -i eth0 & > > rsyslogd -c4 -x -d >rsyslog.debug-10 2>&1 ; killall tcpdump; syslogd > -r > > -h ; mv /core /core-4.2.0-10 > > > > I have several complete steps, as well as several partial sets of > data. > > I > > will gzip them and attempt to send them to you directly. > > Thanks for the data set, I am right now working on it. Unfortunately, > as I > feared, the core files do not really help. There is a big mismatch > between > your system environment and mine, and so gdb is not able to extract any > useful information. All I see is that there are six threads in the > system, > and the rest is almost only question marks. > > So it would be great if you could issue the gdb commands in your > environment > and let me know the outcome. > > Thanks, > Rainer > _______________________________________________ > rsyslog mailing list > http://lists.adiscon.net/mailman/listinfo/rsyslog > http://www.rsyslog.com _______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com

