Configuring a SyslogAppender with a bad hostname or IP address will result in the appender's SyslogOutputStream (sos) being null. If this appender's stop() method is called (which could be triggered from a reset() call in the context) an NPE is thrown because the stop method in SyslogAppenderBase does not check whether sos is null before attempting to call its close() method.