[ILUG] syslog lockup

[Kenn Humborg]

I seem to remember this being discussed on bugtraq recently,
but I can't find it in the archives.  Maybe someone can jog
my memory.

My main Linux server sort-of locked up.  TCP/IP was working
fine (i.e. pings works, connections were accepted).  However,
you wouldn't get a login banner when you telnet it, for 
example.

My working theory is that syslogging started blocking for some
reason, thus stalling anything that wanted to log anything (which
stalls named, anything with tcpwrappers, mail, news, etc).

My question is, what would cause syslog to start blocking?  I'm
not short on disk space.  There are no clues in the logs.  It 
happened just after someone started an Xvnc server, but was that
a co-incidence or the cause?

Any ideas?

Later,
Kenn