I run logstash listening for syslog messages and it crashes entirely when I portscan the host with the following message:
W, [2011-07-21T13:51:34.809000 #22326] WARN – runner.class: Input #<LogStash::Inputs::File:0x10fd0a62> shutting down
W, [2011-07-22T00:01:02.909000 #22326] WARN – runner.class: got connection from xxx.xxx.xxx.xxx:xxxxx
Errno::ECONNRESET: Connection reset by peer - Connection reset by peer
each at org/jruby/RubyIO.java:3134
tcp_listener at file:/opt/logstash/logstash-1.0.14-monolithic.jar!/logstash/inputs/syslog.rb:123
call at org/jruby/RubyProc.java:268
call at org/jruby/RubyProc.java:232
ahha, I'll try to reproduce this and fix it; should be easy.
I think I got a patch that resolves this, will check.
Will show up in logstash 1.0.15