I've worked around my issue for the moment, syslog-ng seems to use less CPU time and so far, hasn't crashed and is generally more responsive. Because this works, I don't know how much time I'll have to debug the issue on rsyslog. I still have the setup, so, hopefully, at some point I can at least get the valgrind run done. thx