Hhmmm... Besides a core-dump (which would definitely be useful), could those of you experiencing this problem try to run rsyslog with debug code enabled?
This is NOT debug mode (-d). You enable it via ./configure --enable-debug This will generate additional debug checks in the rsyslog code. The resulting code will probably run 5 to 10 times SLOWER than production code. But it will catch many obscure errors and at least provide a hint to where the problem is (at least I hope so). If you could do that, that would be great. Thanks, Rainer > -----Original Message----- > From: [EMAIL PROTECTED] [mailto:rsyslog- > [EMAIL PROTECTED] On Behalf Of Patrick von der Hagen > Sent: Friday, September 07, 2007 7:20 PM > To: rsyslog-users > Subject: Re: [rsyslog] rsyslog 1.19.5 released > > Am Freitag, den 07.09.2007, 18:14 +0200 schrieb Rainer Gerhards: > > Hi all, > > > > Rsyslog 1.19.5 has been released. It is primarily targeted at fixing > > rare situations in which a segfault could occur. These have not > > consistently been able to reproduce in lab. Release 1.19.5 may still > The way I see it everyone reporting segfaults so far has been using > RHEL5. So perhaps everybody seeing problems could comment on the > operating-system? That might ease reproducing the problem in a > test-lab. > > > have a problem or may hang where previous versions segfaulted. We are > > actively looking for feedback from the field. Feature-wise, the > $ModDir > > config directive has been added and $ModLoad has been enhanced. We > > recommend upgrading only for those that experience the problem with > > earlier versions or those actively interested in helping to solve the > > bug. If you experience a bug, please report it. > Crash of 1.19.5 after less than 30 minutes. Stack-trace seems to be > quite "normal", however, I've been lucky and captured some > strace-information. Not sure wheter that could be helpful. > > > > poll([{fd=17, events=POLLOUT, revents=POLLOUT}], 1, 0) = 1 > sendto(17, "P*\1\0\0\1\0\0\0\0\0\0\00282\003185\00213\003129\7in-a"..., > 44, MSG_NOSIGNAL, NULL, 0) = 44 > poll([{fd=17, events=POLLIN, revents=POLLIN}], 1, 5000) = 1 > ioctl(17, FIONREAD, [344]) = 0 > recvfrom(17, "P*\205\200\0\1\0\1\0\6\0\7\00282\003185\00213\003129 > \7"..., 1024, 0, {sa_family=AF_INET, sin_port=htons(53), > sin_addr=inet_addr("129.13.96.2")}, [16]) = 344 > close(17) = 0 > socket(PF_NETLINK, SOCK_RAW, 0) = 17 > bind(17, {sa_family=AF_NETLINK, pid=0, groups=00000000}, 12) = 0 > getsockname(17, {sa_family=AF_NETLINK, pid=22923, groups=00000000}, > [4294967308]) = 0 > sendto(17, "\24\0\0\0\26\0\1\3\213~\341F\0\0\0\0\0\0\0\0", 20, 0, > {sa_family=AF_NETLINK, pid=0, groups=00000000}, 12) = 20 > recvmsg(17, {msg_name(12)={sa_family=AF_NETLINK, pid=0, > groups=00000000}, > msg_iov(1)=[{"<\0\0\0\24\0\2\0\213~\341F\213Y\0\0\2\10 > \200\376\1\0\0"..., 4096}], msg_controllen=0, msg_flags=0}, 0) = 128 > recvmsg(17, {msg_name(12)={sa_family=AF_NETLINK, pid=0, > groups=00000000}, msg_iov(1)=[{"@\0\0\0\24\0\2\0\213~\341F\213Y\0\0\n > \200\200\376\1\0\0"..., 4096}], msg_controllen=0, msg_flags=0}, 0) = > 128 > recvmsg(17, {msg_name(12)={sa_family=AF_NETLINK, pid=0, > groups=00000000}, > msg_iov(1)=[{"\24\0\0\0\3\0\2\0\213~\341F\213Y\0\0\0\0 > \0\0\1\0\0\0\24"..., 4096}], msg_controllen=0, msg_flags=0}, 0) = 20 > close(17) = 0 > rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 > futex(0x192fd054, 0x5 /* FUTEX_??? */, 1) = 1 > select(6, [0 4 5], [], NULL, NULL) = 1 (in [5]) > recvfrom(5, "<22>exim[14623]: 2007-09-07 18:3"..., 2047, 0, > {sa_family=AF_INET, sin_port=htons(514), > sin_addr=inet_addr("129.13.185.82")}, [16]) = 165 > rt_sigprocmask(SIG_BLOCK, [HUP], [], 8) = 0 > open("/etc/hosts", O_RDONLY) = 17 > fcntl(17, F_GETFD) = 0 > fcntl(17, F_SETFD, FD_CLOEXEC) = 0 > fstat(17, {st_mode=S_IFREG|0644, st_size=234, ...}) = 0 > mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, > 0) > = 0x2aaab4000000 > read(17, "# Do not remove the following li"..., 4096) = 234 > read(17, "", 4096) = 0 > close(17) = 0 > munmap(0x2aaab4000000, 4096) = 0 > socket(PF_INET, SOCK_DGRAM, IPPROTO_IP) = 17 > connect(17, {sa_family=AF_INET, sin_port=htons(53), > sin_addr=inet_addr("129.13.96.2")}, 28) = 0 > fcntl(17, F_GETFL) = 0x2 (flags O_RDWR) > fcntl(17, F_SETFL, O_RDWR|O_NONBLOCK) = 0 > poll([{fd=17, events=POLLOUT, revents=POLLOUT}], 1, 0) = 1 > sendto(17, "\236\222\1\0\0\1\0\0\0\0\0\0\00282\003185\00213\003129"..., > 44, MSG_NOSIGNAL, NULL, 0) = 44 > poll([{fd=17, events=POLLIN, revents=POLLIN}], 1, 5000) = 1 > ioctl(17, FIONREAD, [344]) = 0 > recvfrom(17, "\236\222\205\200\0\1\0\1\0\6\0\7\00282\003185\00213 > \003"..., 1024, 0, {sa_family=AF_INET, sin_port=htons(53), > sin_addr=inet_addr("129.13.96.2")}, [16]) = 344 > close(17) = 0 > socket(PF_NETLINK, SOCK_RAW, 0) = 17 > bind(17, {sa_family=AF_NETLINK, pid=0, groups=00000000}, 12) = 0 > getsockname(17, {sa_family=AF_NETLINK, pid=22923, groups=00000000}, > [4294967308]) = 0 > sendto(17, "\24\0\0\0\26\0\1\3\213~\341F\0\0\0\0\0\0\0\0", 20, 0, > {sa_family=AF_NETLINK, pid=0, groups=00000000}, 12) = 20 > recvmsg(17, {msg_name(12)={sa_family=AF_NETLINK, pid=0, > groups=00000000}, > msg_iov(1)=[{"<\0\0\0\24\0\2\0\213~\341F\213Y\0\0\2\10 > \200\376\1\0\0"..., 4096}], msg_controllen=0, msg_flags=0}, 0) = 128 > recvmsg(17, {msg_name(12)={sa_family=AF_NETLINK, pid=0, > groups=00000000}, msg_iov(1)=[{"@\0\0\0\24\0\2\0\213~\341F\213Y\0\0\n > \200\200\376\1\0\0"..., 4096}], msg_controllen=0, msg_flags=0}, 0) = > 128 > recvmsg(17, {msg_name(12)={sa_family=AF_NETLINK, pid=0, > groups=00000000}, > msg_iov(1)=[{"\24\0\0\0\3\0\2\0\213~\341F\213Y\0\0\0\0 > \0\0\1\0\0\0\24"..., 4096}], msg_controllen=0, msg_flags=0}, 0) = 20 > close(17) = 0 > rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 > futex(0x192fd054, 0x5 /* FUTEX_??? */, 1) = 1 > select(6, [0 4 5], [], NULL, NULL) = 1 (in [5]) > recvfrom(5, "<22>exim[14099]: 2007-09-07 18:3"..., 2047, 0, > {sa_family=AF_INET, sin_port=htons(514), > sin_addr=inet_addr("129.13.185.82")}, [16]) = 243 > rt_sigprocmask(SIG_BLOCK, [HUP], [], 8) = 0 > open("/etc/hosts", O_RDONLY) = 17 > fcntl(17, F_GETFD) = 0 > fcntl(17, F_SETFD, FD_CLOEXEC) = 0 > fstat(17, {st_mode=S_IFREG|0644, st_size=234, ...}) = 0 > mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, > 0) > = 0x2aaab4000000 > read(17, "# Do not remove the following li"..., 4096) = 234 > read(17, "", 4096) = 0 > close(17) = 0 > munmap(0x2aaab4000000, 4096) = 0 > socket(PF_INET, SOCK_DGRAM, IPPROTO_IP) = 17 > connect(17, {sa_family=AF_INET, sin_port=htons(53), > sin_addr=inet_addr("129.13.96.2")}, 28) = 0 > fcntl(17, F_GETFL) = 0x2 (flags O_RDWR) > fcntl(17, F_SETFL, O_RDWR|O_NONBLOCK) = 0 > poll([{fd=17, events=POLLOUT, revents=POLLOUT}], 1, 0) = 1 > sendto(17, "\377\251\1\0\0\1\0\0\0\0\0\0\00282\003185\00213\003129"..., > 44, MSG_NOSIGNAL, NULL, 0) = 44 > poll([{fd=17, events=POLLIN, revents=POLLIN}], 1, 5000) = 1 > ioctl(17, FIONREAD, [344]) = 0 > recvfrom(17, "\377\251\205\200\0\1\0\1\0\6\0\7\00282\003185\00213 > \003"..., 1024, 0, {sa_family=AF_INET, sin_port=htons(53), > sin_addr=inet_addr("129.13.96.2")}, [16]) = 344 > close(17) = 0 > socket(PF_NETLINK, SOCK_RAW, 0) = 17 > bind(17, {sa_family=AF_NETLINK, pid=0, groups=00000000}, 12) = 0 > getsockname(17, {sa_family=AF_NETLINK, pid=22923, groups=00000000}, > [4294967308]) = 0 > sendto(17, "\24\0\0\0\26\0\1\3\213~\341F\0\0\0\0\0\0\0\0", 20, 0, > {sa_family=AF_NETLINK, pid=0, groups=00000000}, 12) = 20 > recvmsg(17, {msg_name(12)={sa_family=AF_NETLINK, pid=0, > groups=00000000}, > msg_iov(1)=[{"<\0\0\0\24\0\2\0\213~\341F\213Y\0\0\2\10 > \200\376\1\0\0"..., 4096}], msg_controllen=0, msg_flags=0}, 0) = 128 > recvmsg(17, {msg_name(12)={sa_family=AF_NETLINK, pid=0, > groups=00000000}, msg_iov(1)=[{"@\0\0\0\24\0\2\0\213~\341F\213Y\0\0\n > \200\200\376\1\0\0"..., 4096}], msg_controllen=0, msg_flags=0}, 0) = > 128 > recvmsg(17, {msg_name(12)={sa_family=AF_NETLINK, pid=0, > groups=00000000}, > msg_iov(1)=[{"\24\0\0\0\3\0\2\0\213~\341F\213Y\0\0\0\0 > \0\0\1\0\0\0\24"..., 4096}], msg_controllen=0, msg_flags=0}, 0) = 20 > close(17) = 0 > rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 > futex(0x192fd054, 0x5 /* FUTEX_??? */, 1) = 1 > select(6, [0 4 5], [], NULL, NULL) = 1 (in [5]) > recvfrom(5, "<22>spamd[16561]: spamd: identif"..., 2047, 0, > {sa_family=AF_INET, sin_port=htons(514), > sin_addr=inet_addr("129.13.185.81")}, [16]) = 94 > rt_sigprocmask(SIG_BLOCK, [HUP], [], 8) = 0 > open("/etc/hosts", O_RDONLY) = 17 > fcntl(17, F_GETFD) = 0 > fcntl(17, F_SETFD, FD_CLOEXEC) = 0 > fstat(17, {st_mode=S_IFREG|0644, st_size=234, ...}) = 0 > mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, > 0) > = 0x2aaab4000000 > read(17, "# Do not remove the following li"..., 4096) = 234 > read(17, "", 4096) = 0 > close(17) = 0 > munmap(0x2aaab4000000, 4096) = 0 > socket(PF_INET, SOCK_DGRAM, IPPROTO_IP) = 17 > connect(17, {sa_family=AF_INET, sin_port=htons(53), > sin_addr=inet_addr("129.13.96.2")}, 28) = 0 > fcntl(17, F_GETFL) = 0x2 (flags O_RDWR) > fcntl(17, F_SETFL, O_RDWR|O_NONBLOCK) = 0 > poll([{fd=17, events=POLLOUT, revents=POLLOUT}], 1, 0) = 1 > sendto(17, > "\202\24\1\0\0\1\0\0\0\0\0\0\00281\003185\00213\003129\7"..., > 44, MSG_NOSIGNAL, NULL, 0) = 44 > poll([{fd=17, events=POLLIN, revents=POLLIN}], 1, 5000) = 1 > ioctl(17, FIONREAD, [344]) = 0 > recvfrom(17, "\202\24\205\200\0\1\0\1\0\6\0\7\00281\003185\00213 > \003"..., 1024, 0, {sa_family=AF_INET, sin_port=htons(53), > sin_addr=inet_addr("129.13.96.2")}, [16]) = 344 > close(17) = 0 > socket(PF_NETLINK, SOCK_RAW, 0) = 17 > bind(17, {sa_family=AF_NETLINK, pid=0, groups=00000000}, 12) = 0 > getsockname(17, {sa_family=AF_NETLINK, pid=22923, groups=00000000}, > [4294967308]) = 0 > sendto(17, "\24\0\0\0\26\0\1\3\213~\341F\0\0\0\0\0\0\0\0", 20, 0, > {sa_family=AF_NETLINK, pid=0, groups=00000000}, 12) = 20 > recvmsg(17, {msg_name(12)={sa_family=AF_NETLINK, pid=0, > groups=00000000}, > msg_iov(1)=[{"<\0\0\0\24\0\2\0\213~\341F\213Y\0\0\2\10 > \200\376\1\0\0"..., 4096}], msg_controllen=0, msg_flags=0}, 0) = 128 > recvmsg(17, {msg_name(12)={sa_family=AF_NETLINK, pid=0, > groups=00000000}, msg_iov(1)=[{"@\0\0\0\24\0\2\0\213~\341F\213Y\0\0\n > \200\200\376\1\0\0"..., 4096}], msg_controllen=0, msg_flags=0}, 0) = > 128 > recvmsg(17, {msg_name(12)={sa_family=AF_NETLINK, pid=0, > groups=00000000}, > msg_iov(1)=[{"\24\0\0\0\3\0\2\0\213~\341F\213Y\0\0\0\0 > \0\0\1\0\0\0\24"..., 4096}], msg_controllen=0, msg_flags=0}, 0) = 20 > close(17) = 0 > rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 > futex(0x192fd054, 0x5 /* FUTEX_??? */, 1) = 1 > select(6, [0 4 5], [], NULL, NULL) = 1 (in [5]) > recvfrom(5, "<22>spamd[16561]: spamd: result:"..., 2047, 0, > {sa_family=AF_INET, sin_port=htons(514), > sin_addr=inet_addr("129.13.185.81")}, [16]) = 463 > rt_sigprocmask(SIG_BLOCK, [HUP], [], 8) = 0 > open("/etc/hosts", O_RDONLY) = 17 > fcntl(17, F_GETFD) = 0 > fcntl(17, F_SETFD, FD_CLOEXEC) = 0 > fstat(17, {st_mode=S_IFREG|0644, st_size=234, ...}) = 0 > mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, > 0) > = 0x2aaab4000000 > read(17, "# Do not remove the following li"..., 4096) = 234 > read(17, "", 4096) = 0 > close(17) = 0 > munmap(0x2aaab4000000, 4096) = 0 > socket(PF_INET, SOCK_DGRAM, IPPROTO_IP) = 17 > connect(17, {sa_family=AF_INET, sin_port=htons(53), > sin_addr=inet_addr("129.13.96.2")}, 28) = 0 > fcntl(17, F_GETFL) = 0x2 (flags O_RDWR) > fcntl(17, F_SETFL, O_RDWR|O_NONBLOCK) = 0 > poll([{fd=17, events=POLLOUT, revents=POLLOUT}], 1, 0) = 1 > sendto(17, "\33\\\1\0\0\1\0\0\0\0\0\0\00281\003185\00213\003129\7i"..., > 44, MSG_NOSIGNAL, NULL, 0) = 44 > poll([{fd=17, events=POLLIN, revents=POLLIN}], 1, 5000) = 1 > ioctl(17, FIONREAD, [344]) = 0 > recvfrom(17, "\33\\\205\200\0\1\0\1\0\6\0\7\00281\003185\00213 > \00312"..., 1024, 0, {sa_family=AF_INET, sin_port=htons(53), > sin_addr=inet_addr("129.13.96.2")}, [16]) = 344 > close(17) = 0 > socket(PF_NETLINK, SOCK_RAW, 0) = 17 > bind(17, {sa_family=AF_NETLINK, pid=0, groups=00000000}, 12) = 0 > getsockname(17, {sa_family=AF_NETLINK, pid=22923, groups=00000000}, > [4294967308]) = 0 > sendto(17, "\24\0\0\0\26\0\1\3\213~\341F\0\0\0\0\0\0\0\0", 20, 0, > {sa_family=AF_NETLINK, pid=0, groups=00000000}, 12) = 20 > recvmsg(17, {msg_name(12)={sa_family=AF_NETLINK, pid=0, > groups=00000000}, > msg_iov(1)=[{"<\0\0\0\24\0\2\0\213~\341F\213Y\0\0\2\10 > \200\376\1\0\0"..., 4096}], msg_controllen=0, msg_flags=0}, 0) = 128 > recvmsg(17, {msg_name(12)={sa_family=AF_NETLINK, pid=0, > groups=00000000}, msg_iov(1)=[{"@\0\0\0\24\0\2\0\213~\341F\213Y\0\0\n > \200\200\376\1\0\0"..., 4096}], msg_controllen=0, msg_flags=0}, 0) = > 128 > recvmsg(17, {msg_name(12)={sa_family=AF_NETLINK, pid=0, > groups=00000000}, > msg_iov(1)=[{"\24\0\0\0\3\0\2\0\213~\341F\213Y\0\0\0\0 > \0\0\1\0\0\0\24"..., 4096}], msg_controllen=0, msg_flags=0}, 0) = 20 > close(17) = 0 > rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 > futex(0x192fd054, 0x5 /* FUTEX_??? */, 1) = 1 > select(6, [0 4 5], [], NULL, NULL) = 1 (in [5]) > recvfrom(5, "<22>exim[15976]: 2007-09-07 18:3"..., 2047, 0, > {sa_family=AF_INET, sin_port=htons(514), > sin_addr=inet_addr("129.13.185.81")}, [16]) = 143 > rt_sigprocmask(SIG_BLOCK, [HUP], [], 8) = 0 > open("/etc/hosts", O_RDONLY) = 17 > fcntl(17, F_GETFD) = 0 > fcntl(17, F_SETFD, FD_CLOEXEC) = 0 > fstat(17, {st_mode=S_IFREG|0644, st_size=234, ...}) = 0 > mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, > 0) > = 0x2aaab4000000 > read(17, "# Do not remove the following li"..., 4096) = 234 > read(17, "", 4096) = 0 > close(17) = 0 > munmap(0x2aaab4000000, 4096) = 0 > socket(PF_INET, SOCK_DGRAM, IPPROTO_IP) = 17 > connect(17, {sa_family=AF_INET, sin_port=htons(53), > sin_addr=inet_addr("129.13.96.2")}, 28) = 0 > fcntl(17, F_GETFL) = 0x2 (flags O_RDWR) > fcntl(17, F_SETFL, O_RDWR|O_NONBLOCK) = 0 > poll([{fd=17, events=POLLOUT, revents=POLLOUT}], 1, 0) = 1 > sendto(17, "I\27\1\0\0\1\0\0\0\0\0\0\00281\003185\00213\003129\7in"..., > 44, MSG_NOSIGNAL, NULL, 0) = 44 > poll([{fd=17, events=POLLIN, revents=POLLIN}], 1, 5000) = 1 > ioctl(17, FIONREAD, [344]) = 0 > recvfrom(17, "I\27\205\200\0\1\0\1\0\6\0\7\00281\003185\00213 > \003129"..., 1024, 0, {sa_family=AF_INET, sin_port=htons(53), > sin_addr=inet_addr("129.13.96.2")}, [16]) = 344 > close(17) = 0 > socket(PF_NETLINK, SOCK_RAW, 0) = 17 > bind(17, {sa_family=AF_NETLINK, pid=0, groups=00000000}, 12) = 0 > getsockname(17, {sa_family=AF_NETLINK, pid=22923, groups=00000000}, > [4294967308]) = 0 > sendto(17, "\24\0\0\0\26\0\1\3\213~\341F\0\0\0\0\0\0\0\0", 20, 0, > {sa_family=AF_NETLINK, pid=0, groups=00000000}, 12) = 20 > recvmsg(17, {msg_name(12)={sa_family=AF_NETLINK, pid=0, > groups=00000000}, > msg_iov(1)=[{"<\0\0\0\24\0\2\0\213~\341F\213Y\0\0\2\10 > \200\376\1\0\0"..., 4096}], msg_controllen=0, msg_flags=0}, 0) = 128 > recvmsg(17, {msg_name(12)={sa_family=AF_NETLINK, pid=0, > groups=00000000}, msg_iov(1)=[{"@\0\0\0\24\0\2\0\213~\341F\213Y\0\0\n > \200\200\376\1\0\0"..., 4096}], msg_controllen=0, msg_flags=0}, 0) = > 128 > recvmsg(17, {msg_name(12)={sa_family=AF_NETLINK, pid=0, > groups=00000000}, > msg_iov(1)=[{"\24\0\0\0\3\0\2\0\213~\341F\213Y\0\0\0\0 > \0\0\1\0\0\0\24"..., 4096}], msg_controllen=0, msg_flags=0}, 0) = 20 > close(17) = 0 > rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 > futex(0x192fd054, 0x5 /* FUTEX_??? */, 1) = 1 > select(6, [0 4 5], [], NULL, NULL) = 1 (in [5]) > recvfrom(5, "<22>exim[15583]: 2007-09-07 18:3"..., 2047, 0, > {sa_family=AF_INET, sin_port=htons(514), > sin_addr=inet_addr("129.13.185.81")}, [16]) = 318 > rt_sigprocmask(SIG_BLOCK, [HUP], [], 8) = 0 > open("/etc/hosts", O_RDONLY) = 17 > fcntl(17, F_GETFD) = 0 > fcntl(17, F_SETFD, FD_CLOEXEC) = 0 > fstat(17, {st_mode=S_IFREG|0644, st_size=234, ...}) = 0 > mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, > 0) > = 0x2aaab4000000 > read(17, "# Do not remove the following li"..., 4096) = 234 > read(17, "", 4096) = 0 > close(17) = 0 > munmap(0x2aaab4000000, 4096) = 0 > socket(PF_INET, SOCK_DGRAM, IPPROTO_IP) = 17 > connect(17, {sa_family=AF_INET, sin_port=htons(53), > sin_addr=inet_addr("129.13.96.2")}, 28) = 0 > fcntl(17, F_GETFL) = 0x2 (flags O_RDWR) > fcntl(17, F_SETFL, O_RDWR|O_NONBLOCK) = 0 > poll([{fd=17, events=POLLOUT, revents=POLLOUT}], 1, 0) = 1 > sendto(17, "v\325\1\0\0\1\0\0\0\0\0\0\00281\003185\00213\003129\7i"..., > 44, MSG_NOSIGNAL, NULL, 0) = 44 > poll([{fd=17, events=POLLIN, revents=POLLIN}], 1, 5000) = 1 > ioctl(17, FIONREAD, [344]) = 0 > recvfrom(17, "v\325\205\200\0\1\0\1\0\6\0\7\00281\003185\00213 > \00312"..., 1024, 0, {sa_family=AF_INET, sin_port=htons(53), > sin_addr=inet_addr("129.13.96.2")}, [16]) = 344 > close(17) = 0 > socket(PF_NETLINK, SOCK_RAW, 0) = 17 > bind(17, {sa_family=AF_NETLINK, pid=0, groups=00000000}, 12) = 0 > getsockname(17, {sa_family=AF_NETLINK, pid=22923, groups=00000000}, > [4294967308]) = 0 > sendto(17, "\24\0\0\0\26\0\1\3\213~\341F\0\0\0\0\0\0\0\0", 20, 0, > {sa_family=AF_NETLINK, pid=0, groups=00000000}, 12) = 20 > recvmsg(17, {msg_name(12)={sa_family=AF_NETLINK, pid=0, > groups=00000000}, > msg_iov(1)=[{"<\0\0\0\24\0\2\0\213~\341F\213Y\0\0\2\10 > \200\376\1\0\0"..., 4096}], msg_controllen=0, msg_flags=0}, 0) = 128 > recvmsg(17, {msg_name(12)={sa_family=AF_NETLINK, pid=0, > groups=00000000}, msg_iov(1)=[{"@\0\0\0\24\0\2\0\213~\341F\213Y\0\0\n > \200\200\376\1\0\0"..., 4096}], msg_controllen=0, msg_flags=0}, 0) = > 128 > recvmsg(17, {msg_name(12)={sa_family=AF_NETLINK, pid=0, > groups=00000000}, > msg_iov(1)=[{"\24\0\0\0\3\0\2\0\213~\341F\213Y\0\0\0\0 > \0\0\1\0\0\0\24"..., 4096}], msg_controllen=0, msg_flags=0}, 0) = 20 > close(17) = 0 > rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 > futex(0x192fd054, 0x5 /* FUTEX_??? */, 1) = 1 > select(6, [0 4 5], [], NULL, NULL) = 1 (in [5]) > recvfrom(5, "<21>exim[15583]: 2007-09-07 18:3"..., 2047, 0, > {sa_family=AF_INET, sin_port=htons(514), > sin_addr=inet_addr("129.13.185.81")}, [16]) = 318 > rt_sigprocmask(SIG_BLOCK, [HUP], [], 8) = 0 > open("/etc/hosts", O_RDONLY) = 17 > fcntl(17, F_GETFD) = 0 > fcntl(17, F_SETFD, FD_CLOEXEC) = 0 > fstat(17, {st_mode=S_IFREG|0644, st_size=234, ...}) = 0 > mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, > 0) > = 0x2aaab4000000 > read(17, "# Do not remove the following li"..., 4096) = 234 > read(17, "", 4096) = 0 > close(17) = 0 > munmap(0x2aaab4000000, 4096) = 0 > futex(0x3627949960, FUTEX_WAKE, 1) = 0 > socket(PF_INET, SOCK_DGRAM, IPPROTO_IP) = 17 > connect(17, {sa_family=AF_INET, sin_port=htons(53), > sin_addr=inet_addr("129.13.96.2")}, 28) = 0 > fcntl(17, F_GETFL) = 0x2 (flags O_RDWR) > fcntl(17, F_SETFL, O_RDWR|O_NONBLOCK) = 0 > poll([{fd=17, events=POLLOUT, revents=POLLOUT}], 1, 0) = 1 > sendto(17, "+\330\1\0\0\1\0\0\0\0\0\0\00281\003185\00213\003129\7i"..., > 44, MSG_NOSIGNAL, NULL, 0) = 44 > poll([{fd=17, events=POLLIN, revents=POLLIN}], 1, 5000) = 1 > ioctl(17, FIONREAD, [344]) = 0 > recvfrom(17, "+\330\205\200\0\1\0\1\0\6\0\7\00281\003185\00213 > \00312"..., 1024, 0, {sa_family=AF_INET, sin_port=htons(53), > sin_addr=inet_addr("129.13.96.2")}, [16]) = 344 > close(17) = 0 > socket(PF_NETLINK, SOCK_RAW, 0) = 17 > bind(17, {sa_family=AF_NETLINK, pid=0, groups=00000000}, 12) = 0 > getsockname(17, {sa_family=AF_NETLINK, pid=22923, groups=00000000}, > [4294967308]) = 0 > sendto(17, "\24\0\0\0\26\0\1\3\213~\341F\0\0\0\0\0\0\0\0", 20, 0, > {sa_family=AF_NETLINK, pid=0, groups=00000000}, 12) = 20 > recvmsg(17, {msg_name(12)={sa_family=AF_NETLINK, pid=0, > groups=00000000}, > msg_iov(1)=[{"<\0\0\0\24\0\2\0\213~\341F\213Y\0\0\2\10 > \200\376\1\0\0"..., 4096}], msg_controllen=0, msg_flags=0}, 0) = 128 > recvmsg(17, {msg_name(12)={sa_family=AF_NETLINK, pid=0, > groups=00000000}, msg_iov(1)=[{"@\0\0\0\24\0\2\0\213~\341F\213Y\0\0\n > \200\200\376\1\0\0"..., 4096}], msg_controllen=0, msg_flags=0}, 0) = > 128 > recvmsg(17, {msg_name(12)={sa_family=AF_NETLINK, pid=0, > groups=00000000}, > msg_iov(1)=[{"\24\0\0\0\3\0\2\0\213~\341F\213Y\0\0\0\0 > \0\0\1\0\0\0\24"..., 4096}], msg_controllen=0, msg_flags=0}, 0) = 20 > close(17) = 0 > rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 > futex(0x192fd054, 0x5 /* FUTEX_??? */, 1) = 1 > select(6, [0 4 5], [], NULL, NULL) = 1 (in [5]) > recvfrom(5, "<13>greylistd: Socket error: Bro"..., 2047, 0, > {sa_family=AF_INET, sin_port=htons(514), > sin_addr=inet_addr("129.13.185.81")}, [16]) = 41 > rt_sigprocmask(SIG_BLOCK, [HUP], [], 8) = 0 > open("/etc/hosts", O_RDONLY) = 17 > fcntl(17, F_GETFD) = 0 > fcntl(17, F_SETFD, FD_CLOEXEC) = 0 > fstat(17, {st_mode=S_IFREG|0644, st_size=234, ...}) = 0 > mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, > 0) > = 0x2aaab4000000 > read(17, "# Do not remove the following li"..., 4096) = 234 > read(17, "", 4096) = 0 > close(17) = 0 > munmap(0x2aaab4000000, 4096) = 0 > socket(PF_INET, SOCK_DGRAM, IPPROTO_IP) = 17 > connect(17, {sa_family=AF_INET, sin_port=htons(53), > sin_addr=inet_addr("129.13.96.2")}, 28) = 0 > fcntl(17, F_GETFL) = 0x2 (flags O_RDWR) > fcntl(17, F_SETFL, O_RDWR|O_NONBLOCK) = 0 > poll([{fd=17, events=POLLOUT, revents=POLLOUT}], 1, 0) = 1 > sendto(17, "+\366\1\0\0\1\0\0\0\0\0\0\00281\003185\00213\003129\7i"..., > 44, MSG_NOSIGNAL, NULL, 0) = 44 > poll([{fd=17, events=POLLIN, revents=POLLIN}], 1, 5000) = 1 > ioctl(17, FIONREAD, [344]) = 0 > recvfrom(17, "+\366\205\200\0\1\0\1\0\6\0\7\00281\003185\00213 > \00312"..., 1024, 0, {sa_family=AF_INET, sin_port=htons(53), > sin_addr=inet_addr("129.13.96.2")}, [16]) = 344 > close(17) = 0 > socket(PF_NETLINK, SOCK_RAW, 0) = 17 > bind(17, {sa_family=AF_NETLINK, pid=0, groups=00000000}, 12) = 0 > getsockname(17, {sa_family=AF_NETLINK, pid=22923, groups=00000000}, > [4294967308]) = 0 > sendto(17, "\24\0\0\0\26\0\1\3\213~\341F\0\0\0\0\0\0\0\0", 20, 0, > {sa_family=AF_NETLINK, pid=0, groups=00000000}, 12) = 20 > recvmsg(17, {msg_name(12)={sa_family=AF_NETLINK, pid=0, > groups=00000000}, > msg_iov(1)=[{"<\0\0\0\24\0\2\0\213~\341F\213Y\0\0\2\10 > \200\376\1\0\0"..., 4096}], msg_controllen=0, msg_flags=0}, 0) = 128 > recvmsg(17, {msg_name(12)={sa_family=AF_NETLINK, pid=0, > groups=00000000}, msg_iov(1)=[{"@\0\0\0\24\0\2\0\213~\341F\213Y\0\0\n > \200\200\376\1\0\0"..., 4096}], msg_controllen=0, msg_flags=0}, 0) = > 128 > recvmsg(17, {msg_name(12)={sa_family=AF_NETLINK, pid=0, > groups=00000000}, > msg_iov(1)=[{"\24\0\0\0\3\0\2\0\213~\341F\213Y\0\0\0\0 > \0\0\1\0\0\0\24"..., 4096}], msg_controllen=0, msg_flags=0}, 0) = 20 > close(17) = 0 > rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 > futex(0x192fd054, 0x5 /* FUTEX_??? */, 1) = 1 > select(6, [0 4 5], [], NULL, NULL) = 1 (in [5]) > recvfrom(5, "<21>exim[15583]: 2007-09-07 18:3"..., 2047, 0, > {sa_family=AF_INET, sin_port=htons(514), > sin_addr=inet_addr("129.13.185.81")}, [16]) = 318 > rt_sigprocmask(SIG_BLOCK, [HUP], [], 8) = 0 > open("/etc/hosts", O_RDONLY) = 17 > fcntl(17, F_GETFD) = 0 > fcntl(17, F_SETFD, FD_CLOEXEC) = 0 > fstat(17, {st_mode=S_IFREG|0644, st_size=234, ...}) = 0 > mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, > 0) > = 0x2aaab4000000 > read(17, "# Do not remove the following li"..., 4096) = 234 > read(17, "", 4096) = 0 > close(17) = 0 > munmap(0x2aaab4000000, 4096) = 0 > socket(PF_INET, SOCK_DGRAM, IPPROTO_IP) = 17 > connect(17, {sa_family=AF_INET, sin_port=htons(53), > sin_addr=inet_addr("129.13.96.2")}, 28) = 0 > fcntl(17, F_GETFL) = 0x2 (flags O_RDWR) > fcntl(17, F_SETFL, O_RDWR|O_NONBLOCK) = 0 > poll([{fd=17, events=POLLOUT, revents=POLLOUT}], 1, 0) = 1 > sendto(17, "\233A\1\0\0\1\0\0\0\0\0\0\00281\003185\00213\003129\7i"..., > 44, MSG_NOSIGNAL, NULL, 0) = 44 > poll([{fd=17, events=POLLIN, revents=POLLIN}], 1, 5000) = 1 > ioctl(17, FIONREAD, [344]) = 0 > recvfrom(17, "\233A\205\200\0\1\0\1\0\6\0\7\00281\003185\00213 > \00312"..., 1024, 0, {sa_family=AF_INET, sin_port=htons(53), > sin_addr=inet_addr("129.13.96.2")}, [16]) = 344 > close(17) = 0 > socket(PF_NETLINK, SOCK_RAW, 0) = 17 > bind(17, {sa_family=AF_NETLINK, pid=0, groups=00000000}, 12) = 0 > getsockname(17, {sa_family=AF_NETLINK, pid=22923, groups=00000000}, > [4294967308]) = 0 > sendto(17, "\24\0\0\0\26\0\1\3\213~\341F\0\0\0\0\0\0\0\0", 20, 0, > {sa_family=AF_NETLINK, pid=0, groups=00000000}, 12) = 20 > recvmsg(17, {msg_name(12)={sa_family=AF_NETLINK, pid=0, > groups=00000000}, > msg_iov(1)=[{"<\0\0\0\24\0\2\0\213~\341F\213Y\0\0\2\10 > \200\376\1\0\0"..., 4096}], msg_controllen=0, msg_flags=0}, 0) = 128 > recvmsg(17, {msg_name(12)={sa_family=AF_NETLINK, pid=0, > groups=00000000}, msg_iov(1)=[{"@\0\0\0\24\0\2\0\213~\341F\213Y\0\0\n > \200\200\376\1\0\0"..., 4096}], msg_controllen=0, msg_flags=0}, 0) = > 128 > recvmsg(17, {msg_name(12)={sa_family=AF_NETLINK, pid=0, > groups=00000000}, > msg_iov(1)=[{"\24\0\0\0\3\0\2\0\213~\341F\213Y\0\0\0\0 > \0\0\1\0\0\0\24"..., 4096}], msg_controllen=0, msg_flags=0}, 0) = 20 > close(17) = 0 > rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 > futex(0x192fd054, 0x5 /* FUTEX_??? */, 1) = 1 > select(6, [0 4 5], [], NULL, NULL) = 1 (in [5]) > recvfrom(5, "<22>exim[14536]: 2007-09-07 18:3"..., 2047, 0, > {sa_family=AF_INET, sin_port=htons(514), > sin_addr=inet_addr("129.13.185.82")}, [16]) = 171 > rt_sigprocmask(SIG_BLOCK, [HUP], [], 8) = 0 > open("/etc/hosts", O_RDONLY) = 17 > fcntl(17, F_GETFD) = 0 > fcntl(17, F_SETFD, FD_CLOEXEC) = 0 > fstat(17, {st_mode=S_IFREG|0644, st_size=234, ...}) = 0 > mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, > 0) > = 0x2aaab4000000 > read(17, "# Do not remove the following li"..., 4096) = 234 > read(17, "", 4096) = 0 > close(17) = 0 > munmap(0x2aaab4000000, 4096) = 0 > socket(PF_INET, SOCK_DGRAM, IPPROTO_IP) = 17 > connect(17, {sa_family=AF_INET, sin_port=htons(53), > sin_addr=inet_addr("129.13.96.2")}, 28) = 0 > fcntl(17, F_GETFL) = 0x2 (flags O_RDWR) > fcntl(17, F_SETFL, O_RDWR|O_NONBLOCK) = 0 > poll([{fd=17, events=POLLOUT, revents=POLLOUT}], 1, 0) = 1 > sendto(17, "M\243\1\0\0\1\0\0\0\0\0\0\00282\003185\00213\003129\7i"..., > 44, MSG_NOSIGNAL, NULL, 0) = 44 > poll([{fd=17, events=POLLIN, revents=POLLIN}], 1, 5000) = 1 > ioctl(17, FIONREAD, [344]) = 0 > recvfrom(17, "M\243\205\200\0\1\0\1\0\6\0\7\00282\003185\00213 > \00312"..., 1024, 0, {sa_family=AF_INET, sin_port=htons(53), > sin_addr=inet_addr("129.13.96.2")}, [16]) = 344 > close(17) = 0 > socket(PF_NETLINK, SOCK_RAW, 0) = 17 > bind(17, {sa_family=AF_NETLINK, pid=0, groups=00000000}, 12) = 0 > getsockname(17, {sa_family=AF_NETLINK, pid=22923, groups=00000000}, > [4294967308]) = 0 > sendto(17, "\24\0\0\0\26\0\1\3\213~\341F\0\0\0\0\0\0\0\0", 20, 0, > {sa_family=AF_NETLINK, pid=0, groups=00000000}, 12) = 20 > recvmsg(17, {msg_name(12)={sa_family=AF_NETLINK, pid=0, > groups=00000000}, > msg_iov(1)=[{"<\0\0\0\24\0\2\0\213~\341F\213Y\0\0\2\10 > \200\376\1\0\0"..., 4096}], msg_controllen=0, msg_flags=0}, 0) = 128 > recvmsg(17, {msg_name(12)={sa_family=AF_NETLINK, pid=0, > groups=00000000}, msg_iov(1)=[{"@\0\0\0\24\0\2\0\213~\341F\213Y\0\0\n > \200\200\376\1\0\0"..., 4096}], msg_controllen=0, msg_flags=0}, 0) = > 128 > recvmsg(17, {msg_name(12)={sa_family=AF_NETLINK, pid=0, > groups=00000000}, > msg_iov(1)=[{"\24\0\0\0\3\0\2\0\213~\341F\213Y\0\0\0\0 > \0\0\1\0\0\0\24"..., 4096}], msg_controllen=0, msg_flags=0}, 0) = 20 > close(17) = 0 > rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 > futex(0x192fd054, 0x5 /* FUTEX_??? */, 1) = 1 > select(6, [0 4 5], [], NULL, NULL) = ? ERESTARTNOHAND (To be > restarted) > trace: ptrace(PTRACE_SYSCALL, ...): No such process > Process 22923 detached > > -- > CU, > Patrick. > _______________________________________________ > rsyslog mailing list > http://lists.adiscon.net/mailman/listinfo/rsyslog _______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog
