Error accepting new connection

Hi list,
I don't know if this are a iptables or a kernel or where it
come from,
but after this, I cannot more login on my server, so I think
that it's a
kernel/net problem, so I ask here 

I see that on my syslog there are a ton (milions) of:

Jul 22 11:44:51 srv syslog-ng[22054]: Error accepting new
connection;
error='Too many open files (24)'

But this is a "simple" server that do only nat and
some other, simple,
tasks, and there are no programs that can open so many
files.

cat /proc/sys/fs/file-max
202771

Where it can born? Do I have to change some /proc/*
parameters?

Thanks a lot!

Michele

Michele Petrazzo - Unipex srl wrote:
> Hi list,
> I don't know if this are a iptables or a kernel or
where it come from,
> but after this, I cannot more login on my server, so I
think that it's a
> kernel/net problem, so I ask here 
>
> I see that on my syslog there are a ton (milions) of:
>
> Jul 22 11:44:51 srv syslog-ng[22054]: Error accepting
new connection;
> error='Too many open files (24)'
>
> But this is a "simple" server that do only
nat and some other, simple,
> tasks, and there are no programs that can open so many
files.

Doesn't seem like a netfilter problem. Try using lsof
(before the point 
where you cannot login, or on a previous login if that still
works) and 
netstat to see where those filehandles go.

HTH,
M4

> Michele Petrazzo - Unipex srl wrote:
>> [..]
>> I see that on my syslog there are a ton (milions)
of:
>>
>> Jul 22 11:44:51 srv syslog-ng[22054]: Error
accepting new connection;
>> error='Too many open files (24)'
>>
>> But this is a "simple" server that do
only nat and some other, simple,
>> tasks, and there are no programs that can open so
many files.
Sometime recently syslog-ng got the grand idea to severely
limit
incoming connections. Edit your syslog-ng conf and edit to
something
like this:

source src { unix-stream("/dev/log"
max-connections(50)); internal(); };

-david
-- 
"Millions of innocent men, women and children, since
the introduction of
Christianity, have been burnt, tortured, fined, imprisoned;
yet we have not
advanced one inch towards uniformity. What has been the
effect of coercion?
To make half the world fools, and the other half
hypocrites."
--Thomas Jefferson

This message is confidential to the Internet at large,
unless otherwise
indicated or apparent from its nature. It may not be
reproduced on Mars
unless it has previously been printed on Uranus. This
message is directed to
the intended recipient only (usually everyone, but sometimes
nobody and once
in a blue moon, just somebody), who may be readily
determined by the sender
of this message and its contents. This email message
(including any
attachments) is not for the sole use of the intended
recipient(s) and may or
may not contain confidential, proprietary and privileged
information. It may
include sarcastic holier than tho content. If the reader of
this message is
not the intended recipient, or an employee or agent
responsible for
delivering this message to the intended recipient: (a) any
dissemination or
copying of this message is strictly prohibited unless you
feel otherwise;
and (b) immediately notify the sender by return message (but
only if the sun
has gone black) and destroy any copies of this message in
any form
(electronic, paper or carved in stone) that you have. Please
destroy by
smashing your computer with a 21lb sledge hammer
approximately 17 times to
ensure destruction of your system. Any unauthorized review,
use, disclosure
or distribution is most assuredly not prohibited and you
will not
IMMEDIATELY be PROSECUTED to the fullest ... or emptiest ...
extent of the
law. If you are not the intended recipient, please
immediately notify some
random person of your age, sex, and location and your
undying desire to
fornicate with them by email and destroy all copies of the
original message
if you sent it to an underage person. Oh, and definitely
don't tell me
about it. The delivery of this message and its information
is neither
intended to be nor constitutes a disclosure or waiver of any
trade secrets,
intellectual property, attorney work product, or
attorney-client
communications. If you happen to be a corporation that uses
lawyer-think-speak-asinine-thoughts well then please sit
your ass back down
and we will promptly ignore the hell out of you and your
disclaimers. Wait,
no we won't. We have this urgent primal need to publically
make fun of you,
and then we'll repost your message in blazing full frontal
nudity across the
internet. The authority of the individual sending this
message to legally
bind any entity is neither apparent nor implied, and must be
independently
verified - uh ... duh? Isn't that obvious? Of course not.
Only people with
intelligence recognize such simple facts. Thank you for
standing in the back
yard and whining your ass off holding up tiny little posters
forbidding
mosquitos from biting you. Does a whole hell of a lot of
good. Right?
Yeah, you keep up with the delusions. Keeping up with the
Jones is good
after all. Holy hell Batman sleeps with Robin -- This
disclaimer is short!