<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=Content-Type content="text/html; charset=us-ascii">
<META content="MSHTML 6.00.2800.1400" name=GENERATOR></HEAD>
<BODY>
<DIV><FONT face=Arial size=2><SPAN
class=962292909-02052006>Hi,</SPAN></FONT></DIV>
<DIV><FONT face=Arial size=2><SPAN
class=962292909-02052006></SPAN></FONT> </DIV>
<DIV><FONT face=Arial size=2><SPAN class=962292909-02052006>I recently converted
our RedHat EL servers (Release 3 Update 6) form the sysklog package to
syslog-ng. On some of the servers syslog-ng appears to be occasionally hanging,
i.e. messages stop getting written to the various log files. This also has a
knock on effect of stopping logins, cron jobs hanging, etc, presumably because
they are waiting to write to a log file. I read in the archives that this can be
caused by something else using /dev/log but there's no other syslogd or minilogd
processes running and lsof gives the following:</SPAN></FONT></DIV>
<DIV><FONT face=Arial size=2><SPAN
class=962292909-02052006></SPAN></FONT> </DIV>
<DIV><FONT face=Arial size=2><SPAN
class=962292909-02052006>COMMAND PID USER FD TYPE DEVICE SIZE NODE NAME<BR>syslog-ng
1384 root 5u unix
0xf778c880 1703 /dev/log<BR>syslog-ng 1384
root 6u unix 0xf777e8c0
1715 /dev/log<BR></SPAN></FONT></DIV>
<DIV><FONT face=Arial size=2><SPAN class=962292909-02052006>I'm using the RedHat
conf file bundled in the contribs directory that comes with the source
code.</SPAN></FONT></DIV>
<DIV><FONT face=Arial size=2><SPAN
class=962292909-02052006></SPAN></FONT> </DIV>
<DIV><FONT face=Arial size=2><SPAN class=962292909-02052006>Any ideas would be
welcome.</SPAN></FONT></DIV>
<DIV><FONT face=Arial size=2><SPAN
class=962292909-02052006></SPAN></FONT> </DIV>
<DIV><FONT face=Arial size=2><SPAN
class=962292909-02052006>Thanks</SPAN></FONT></DIV>
<DIV><FONT face=Arial size=2><SPAN
class=962292909-02052006></SPAN></FONT> </DIV>
<DIV><FONT face=Arial size=2><SPAN
class=962292909-02052006>Tony</DIV></SPAN></FONT><FONT SIZE=3><BR>
<BR>
*****************************************************<BR>
<BR>
You can find us at www.voca.com<BR>
<BR>
*****************************************************<BR>
This communication is confidential and intended for <BR>
the exclusive use of the addressee only. You should <BR>
not disclose its contents to any other person.<BR>
If you are not the intended recipient please notify <BR>
the sender named above immediately.<BR>
<BR>
Registered in England, No 1023742,<BR>
Registered Office: Voca Limited<BR>
Drake House, Three Rivers Court,<BR>
Homestead Road, Rickmansworth,<BR>
Hertfordshire, WD3 1FX<BR>
</FONT>
<BR>
This message has been checked for all email viruses by MessageLabs.<BR>
</BODY></HTML>