syslog-ng 3.5.3-1 using 37GB of memory

Bug #1394101 reported by Johan Walles
12
This bug affects 2 people
Affects Status Importance Assigned to Milestone
syslog-ng (Ubuntu)
Confirmed
Undecided
Unassigned

Bug Description

Hi!

We had to restart syslog-ng because it was using 37GB of memory.

We're on 3.5.3-1 on Trusty.

The syslog-ng changelog says that 3.5.6-1 is "fixing a major memory leak", could that be it?
http://changelogs.ubuntu.com/changelogs/pool/universe/s/syslog-ng/syslog-ng_3.5.6-2/changelog

Here's /proc/4126/status from the syslog-ng process before I killed it:
"
Name: syslog-ng
State: S (sleeping)
Tgid: 4126
Ngid: 0
Pid: 4126
PPid: 4125
TracerPid: 0
Uid: 0 0 0 0
Gid: 0 0 0 0
FDSize: 512
Groups: 0 10000 10001 10008
VmPeak: 37972880 kB
VmSize: 37971560 kB
VmLck: 0 kB
VmPin: 0 kB
VmHWM: 30759688 kB
VmRSS: 28501192 kB
VmData: 37915340 kB
VmStk: 136 kB
VmExe: 8 kB
VmLib: 6532 kB
VmPTE: 74184 kB
VmSwap: 9415972 kB
Threads: 1
SigQ: 2/514938
SigPnd: 0000000000000000
ShdPnd: 0000000000000000
SigBlk: 0000000000000000
SigIgn: 0000000000401000
SigCgt: 0000000180016003
CapInh: 0000000000000000
CapPrm: 0000000400002c0f
CapEff: 0000000400000000
CapBnd: 0000001fffffffff
Seccomp: 0
Cpus_allowed: ffffffff
Cpus_allowed_list: 0-31
Mems_allowed: 00000000,00000003
Mems_allowed_list: 0-1
voluntary_ctxt_switches: 1566531071
nonvoluntary_ctxt_switches: 7187937
"

$ lsb_release -rd
Description: Ubuntu 14.04 LTS
Release: 14.04

$ apt-cache policy syslog-ng
syslog-ng:
  Installed: 3.5.3-1
  Candidate: 3.5.3-1
  Version table:
 *** 3.5.3-1 0
        400 http://debmirror:9888/ubuntu/ trusty/universe amd64 Packages
        100 /var/lib/dpkg/status

Revision history for this message
Johan Walles (walles) wrote :

Quoting the upstream changelog for 3.5.5:
http://www.balabit.com/downloads/files/syslog-ng/sources/3.5.5
"
* Major memory leaks have been fixed in various parts of
  syslog-ng, including but not limited to network and file
  destinations and sources, value-pairs (thus affecting
  mongodb, $(format-json), and others), template handling and
  rewrite rules.

  Some of these leaks only happened during reload, some
  leaked on every message. They have now been plugged.
"

3.5.6 contains further memory leak fixes which weren't included in 3.5.5 "due to a merging mistake".

Revision history for this message
Launchpad Janitor (janitor) wrote :

Status changed to 'Confirmed' because the bug affects multiple users.

Changed in syslog-ng (Ubuntu):
status: New → Confirmed
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.