[Logcheck-devel] Bug#761813: logcheck: egrep uses ridiculous amounts of memory

[Matijs van Zuijlen]

Package: logcheck
Version: 1.3.16
Severity: normal

Lately I've noticed egrep taking enormous amounts of memory when running
logcheck, especially after a reboot. As an example, a 58K patterns file
(with local patterns) combined with a 86K log file made egrep use more
than 1G of ram.

Splitting my local patterns alleviates the problem of course, but that
shouldn't really be necessary for these file sizes.

-- System Information:
Debian Release: jessie/sid
  APT prefers unstable
  APT policy: (500, 'unstable'), (1, 'experimental')
Architecture: amd64 (x86_64)

Kernel: Linux 3.16-1-amd64 (SMP w/4 CPU cores)
Locale: LANG=en_IE.UTF-8, LC_CTYPE=en_IE.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages logcheck depends on:
ii  adduser                         3.113+nmu3
ii  cron                            3.0pl1-124.2
ii  lockfile-progs                  0.1.17
ii  logtail                         1.3.16
ii  mime-construct                  1.11
ii  postfix [mail-transport-agent]  2.11.1-1
ii  rsyslog [system-log-daemon]     8.4.0-2

Versions of packages logcheck recommends:
ii  logcheck-database  1.3.16

Versions of packages logcheck suggests:
pn  syslog-summary  <none>

-- Configuration Files:
/etc/logcheck/logcheck.conf [Errno 13] Permission denied: u'/etc/logcheck/logcheck.conf'
/etc/logcheck/logcheck.logfiles [Errno 13] Permission denied: u'/etc/logcheck/logcheck.logfiles'

-- no debconf information