Customer are currently running on Windriver 5.0.1 RCPL8 with syslog-ng 3.4.2, and experience a bug in the file descriptor handling inside syslog-ng. We haven’t yet tried RCPL10, but the same version of syslog-ng seems to available there. When trying syslog-ng 3.4.7 we can’t see the problem. From the NEWS file there seems to be a bugfix related to our problem: “* A file descriptor and memory leak has been fixed in the syslog() destination.” The symptoms on 3.4.2 is that log messages suddenly appear on the console, and some files are staying at file size 0 after a logrotate (and SIGHUP).
Pull the fix from syslog-ng 3.4.7.