{"action":"created","issue":{"url":"https://api.github.com/repos/elastic/packetbeat/issues/226","labels_url":"https://api.github.com/repos/elastic/packetbeat/issues/226/labels{/name}","comments_url":"https://api.github.com/repos/elastic/packetbeat/issues/226/comments","events_url":"https://api.github.com/repos/elastic/packetbeat/issues/226/events","html_url":"https://github.com/elastic/packetbeat/issues/226","id":104804927,"number":226,"title":"packetbeat stops logging data with too many open files for pids","user":{"login":"portante","id":949097,"avatar_url":"https://avatars.githubusercontent.com/u/949097?v=3","gravatar_id":"","url":"https://api.github.com/users/portante","html_url":"https://github.com/portante","followers_url":"https://api.github.com/users/portante/followers","following_url":"https://api.github.com/users/portante/following{/other_user}","gists_url":"https://api.github.com/users/portante/gists{/gist_id}","starred_url":"https://api.github.com/users/portante/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/portante/subscriptions","organizations_url":"https://api.github.com/users/portante/orgs","repos_url":"https://api.github.com/users/portante/repos","events_url":"https://api.github.com/users/portante/events{/privacy}","received_events_url":"https://api.github.com/users/portante/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":1,"created_at":"2015-09-04T00:09:47Z","updated_at":"2015-09-04T00:20:42Z","closed_at":null,"body":"Saw this on my install of packetbeat, \"`Packetbeat version 1.0.0-beta2 (amd64)`\" (the `amd64` is wrong, it is an `x86_64 CPU`):\r\n\r\n```\r\n[root@perf34 ~]# systemctl status packetbeat\r\npacketbeat.service - LSB: Packetbeat agent\r\n   Loaded: loaded (/etc/rc.d/init.d/packetbeat)\r\n   Active: active (running) since Thu 2015-08-06 11:04:29 UTC; 4 weeks 0 days ago\r\n  Process: 53011 ExecStart=/etc/rc.d/init.d/packetbeat start (code=exited, status=0/SUCCESS)\r\n   CGroup: /system.slice/packetbeat.service\r\n           ├─53023 packetbeat-god -r / -n -p /var/run/packetbeat.pid -- /usr/bin/packetbeat -c /etc/packetbeat/packetbeat.yml\r\n           └─53024 /usr/bin/packetbeat -c /etc/packetbeat/packetbeat.yml\r\n \r\nSep 03 10:55:37 perf34 /usr/bin/packetbeat[53024]: procs.go:288: FindSocketsOfPid: Open: open /proc/2088/fd: too many open files\r\nSep 03 10:55:37 perf34 /usr/bin/packetbeat[53024]: procs.go:288: FindSocketsOfPid: Open: open /proc/2156/fd: too many open files\r\nSep 03 10:55:37 perf34 /usr/bin/packetbeat[53024]: procs.go:288: FindSocketsOfPid: Open: open /proc/2344/fd: too many open files\r\nSep 03 10:55:37 perf34 /usr/bin/packetbeat[53024]: procs.go:288: FindSocketsOfPid: Open: open /proc/2345/fd: too many open files\r\nSep 03 10:55:37 perf34 /usr/bin/packetbeat[53024]: procs.go:288: FindSocketsOfPid: Open: open /proc/2346/fd: too many open files\r\nSep 03 10:55:37 perf34 /usr/bin/packetbeat[53024]: procs.go:288: FindSocketsOfPid: Open: open /proc/2347/fd: too many open files\r\nSep 03 10:55:37 perf34 /usr/bin/packetbeat[53024]: procs.go:288: FindSocketsOfPid: Open: open /proc/2348/fd: too many open files\r\nSep 03 10:55:37 perf34 /usr/bin/packetbeat[53024]: procs.go:153: Error finding PID files for httpd: Open /proc: open /proc: too many open files\r\nSep 03 10:55:37 perf34 /usr/bin/packetbeat[53024]: procs.go:153: Error finding PID files for app: Open /proc: open /proc: too many open files\r\nSep 03 10:55:37 perf34 /usr/bin/packetbeat[53024]: procs.go:153: Error finding PID files for glusterfs: Open /proc: open /proc: too many open files\r\n```"},"comment":{"url":"https://api.github.com/repos/elastic/packetbeat/issues/comments/137607011","html_url":"https://github.com/elastic/packetbeat/issues/226#issuecomment-137607011","issue_url":"https://api.github.com/repos/elastic/packetbeat/issues/226","id":137607011,"user":{"login":"urso","id":75886,"avatar_url":"https://avatars.githubusercontent.com/u/75886?v=3","gravatar_id":"","url":"https://api.github.com/users/urso","html_url":"https://github.com/urso","followers_url":"https://api.github.com/users/urso/followers","following_url":"https://api.github.com/users/urso/following{/other_user}","gists_url":"https://api.github.com/users/urso/gists{/gist_id}","starred_url":"https://api.github.com/users/urso/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/urso/subscriptions","organizations_url":"https://api.github.com/users/urso/orgs","repos_url":"https://api.github.com/users/urso/repos","events_url":"https://api.github.com/users/urso/events{/privacy}","received_events_url":"https://api.github.com/users/urso/received_events","type":"User","site_admin":false},"created_at":"2015-09-04T00:20:42Z","updated_at":"2015-09-04T00:20:42Z","body":"I see a missing close in FindSocketsOfPid.\r\n\r\nWhich publisher have you configured. Can you check with lsof if your packetbeat instance holds loads of file descriptors into proc?"}}