There's an edge case in resolv.rb that can lead to file descriptor leaks on a highly saturated system (logstash in our case).
(the cliff at the end is from a restart of the application)
We're using the logstash-filter-dns plugin which uses timeout.
When a timeout fires while waiting for a randomport, the new object is never returned to the caller. Instead requester is set to nil. There's no handle to any sockets that were created in the initializer, so they can't be closed, and one ore more file descriptors is leaked.
(This if my first patch submission, let me know what I can fix or do better.)