Dig into the log, it's about 50 users in file, about 20 online. Feb 13 23:26:20 (none) ocserv[16343]: IP7:51025 DTLS handshake completed (plaintext MTU: 1290) Feb 13 23:26:21 (none) ocserv[24422]: IP:40468 user 'user223AC' tried to connect more than 5 times Feb 13 23:26:21 (none) ocserv[24422]: IP:40468 failed authentication attempt for user 'user223AC' Feb 13 23:26:21 (none) ocserv[16342]: IP:40468 worker-auth.c:836: failed authentication for '' Feb 13 23:26:21 (none) ocserv[24422]: IP:40468 main-misc.c:464: command socket closed Feb 13 23:26:21 (none) ocserv[24422]: IP:40468 client disconnected, became zombie Feb 13 23:26:22 (none) ocserv[16351]: IP:36409 accepted connection Feb 13 23:26:22 (none) kernel: [6765291.242694] ocserv-main[24422]: segfault at 40 ip 0000000000419fee sp 00007fff446c6f00 error 4 in ocserv[400000+2f000] Feb 13 23:26:22 (none) ocserv[13356]: IP6:9517 worker-misc.c:90: parent terminated Feb 13 23:26:22 (none) ocserv[16334]: IP5:55043 worker-misc.c:90: parent terminated Feb 13 23:26:22 (none) ocserv[16351]: common.c:301: recvmsg returned zero Feb 13 23:26:22 (none) ocserv[16343]: IP4:51025 worker-misc.c:90: parent terminated Feb 13 23:26:22 (none) ocserv[16287]: IP2:26000 worker-misc.c:90: parent terminated Feb 13 23:26:22 (none) ocserv[16351]: IP:36409 worker-auth.c:227: error receiving auth reply message Feb 13 23:26:22 (none) ocserv[16351]: IP:36409 worker-auth.c:836: failed authentication for '' Feb 13 23:26:22 (none) ocserv[16262]: IP3:10496 worker-misc.c:90: parent terminated On Fri, Feb 14, 2014 at 4:39 PM, Nikos Mavrogiannopoulos <n.mavrogiannopoulos at gmail.com> wrote: > On Fri, Feb 14, 2014 at 9:14 AM, Steve <steve at thupdi.net> wrote: >> Hi, >> I found an issue that ocserv-main and ocserv-secmod processes will die >> after some days, leave multi ocserv-worker in system, use 295a87b git. > > Could you provide more information on the crash? logs at the time of > the crash, and some indication of the load of your server (how many > users were connected etc). > >> Is it OK to add an option to specify a log file to log anything? >> Currently it mess up syslog... > > You should be able to redirect into a single file all ocserv's logs > from your syslog facility. > > regards, > Nikos