<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
<meta name="Generator" content="Microsoft Exchange Server">
<!-- converted from rtf -->
<style><!-- .EmailQuote { margin-left: 1pt; padding-left: 4pt; border-left: #800000 2px solid; } --></style>
</head>
<body>
<font face="Calibri, sans-serif" size="2">
<div>Hi,</div>
<div> </div>
<div>We’re using syslog-ng PE with disk buffering enabled.</div>
<div> </div>
<div>The syslog clients gets disconnected all the time, and when they restart I get these log messages:</div>
<div> </div>
<div>2010-02-11T14:19:37+00:00 bruatosd003 syslog-ng[4686]: I/O error occurred while writing; fd='8', error='Connection reset by peer (104)'</div>
<div>2010-02-11T14:19:37+00:00 bruatosd003 syslog-ng[4686]: Syslog connection broken; fd='8', server='AF_INET(172.27.12.22:1998)', time_reopen='60'</div>
<div>2010-02-11T14:19:37+00:00 bruatosd003 syslog-ng[4686]: Closing log transport fd; fd='8'</div>
<div>2010-02-11T14:20:41+00:00 bruatosd003 syslog-ng[4686]: Syslog connection established; fd='8', server='AF_INET(172.27.12.22:1998)', local='AF_INET(0.0.0.0:0)'</div>
<div>2010-02-11T14:20:54+00:00 bruatosd003 syslog-ng[28626]: The current log file has a mismatching size/inode information, restarting from the beginning; filename='/var/ig/logs/orderserver/os-gc.1.log'</div>
<div>2010-02-11T14:20:54+00:00 bruatosd003 syslog-ng[28626]: Disk-buffer state saved; filename='/var/ig/logs/orderserver/syslog-ng-db/syslog-ng-00004.qf', qout_length='0', qbacklog_length='0', qoverflow_length='0', qdisk_length='0'</div>
<div>2010-02-11T14:20:54+00:00 bruatosd003 syslog-ng[28626]: The current log file has a mismatching size/inode information, restarting from the beginning; filename='/var/ig/logs/orderserver/os-gc.2.log'</div>
<div> </div>
<div> </div>
<div>After that syslog starts to send the contents of the file from the start of the file again, after a while it restart this process. In a seemingly endless loop.</div>
<div> </div>
<div>As you can see the pid changes between the disconnect and the message about mismatching size/inode.</div>
<div> </div>
<div>I’m trying to work out what causes it and how to fix it, any suggestions?</div>
<div> </div>
<div>Best,</div>
<div>Henric</div>
<div> </div>
<div> </div>
<div> </div>
<div><font face="Times New Roman, serif" size="3"><br>
</font></div>
<div><font face="Times New Roman, serif" size="3"><u> ________________________________ </u></font></div>
<div><font face="Courier New, sans-serif" size="2">The information contained in this email is strictly confidential and for the use of the addressee only, unless otherwise indicated. If you are not the intended recipient, please do not read, copy, use or disclose
to others this message or any attachment. Please also notify the sender by replying to this email or by telephone (+44 (0)20 7896 0011) and then delete the email and any copies of it. Opinions, conclusions (etc.) that do not relate to the official business
of this company shall be understood as neither given nor endorsed by it. IG Index Ltd is a company registered in England and Wales under number 01190902. VAT registration number 761 2978 07. Registered Office: Friars House, 157-168 Blackfriars Road, London
SE1 8EZ. Authorised and regulated by the Financial Services Authority. FSA Register number 114059.<br>
</font></div>
</font>
</body>
</html>