<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<meta content="text/html;charset=ISO-8859-1" http-equiv="Content-Type">
</head>
<body bgcolor="#ffffff" text="#0050d0">
<font size="-1"><font face="Helvetica, Arial, sans-serif">I think I'm
getting this behavior as well. I use a master syslog-ng process to send
filtered packets to another syslog-ng process on the same box over tcp,
and its going horridly slow. I tried replacing the syslog-ng child
process with netcat, and it the master process is sending really fast.
But whenever I start up the child syslog-ng, it starts backing up and
the master process starts buffering all the data it cant send.<br>
This behavior seems to have started after upgrading to 3.1.0. I'll try
downgrading back to 3.0.5 and see if it continues, as well as try to
figure out why its performing so bad.<br>
I've done an strace, and its definitely having something fishy happen
with the socket.<br>
<br>
(syslog-ng.516 is the process name of the child process)<br>
</font></font>
<table border="1" cellpadding="2" cellspacing="2" width="100%">
<tbody>
<tr>
<td valign="top"><tt><font size="-1"># strace -p `pidof
syslog-ng.516` -i -r -T<br>
...<br>
0.000029 [ 370640d510] write(47, "15364 [3845467040] Apr 1
15:21:"..., 125) = 125 <0.000009><br>
0.000046 [ 370640dd40] lseek(47, 0, SEEK_END) = 3546874498
<0.000006><br>
0.000029 [ 370640d510] write(47, "15364 [3845467040] Apr 1
15:21:"..., 186) = 186 <0.000009><br>
0.000067 [ 3705ccae0f] poll([{fd=3, events=POLLIN}, {fd=5,
events=POLLIN}, {fd=7, events=POLLIN}, {fd=9, events=0}], 4, 0) = 0
(Timeout) <0.000008><br>
0.000307 [ 3705ccae0f] poll([{fd=3, events=POLLIN}, {fd=5,
events=POLLIN}, {fd=7, events=POLLIN}, {fd=9, events=0}], 4, 0) = 0
(Timeout) <0.000010><br>
0.000310 [ 3705ccae0f] poll([{fd=3, events=POLLIN}, {fd=5,
events=POLLIN}, {fd=7, events=POLLIN}, {fd=9, events=0}], 4, 0) = 0
(Timeout) <0.000008><br>
0.000262 [ 3705ccae0f] poll([{fd=3, events=POLLIN}, {fd=5,
events=POLLIN}, {fd=7, events=POLLIN}, {fd=9, events=0}], 4, 4648) = 0
(Timeout) <4.648231><br>
4.648391 [ 370640dd40] lseek(15, 0, SEEK_END) = 413347569
<0.000009><br>
0.000041 [ 370640d510] write(15, "Apr 1 15:21:49 gwsinam03
postfi"..., 230) = 230 <0.000015><br>
0.000074 [ 370640dd40] lseek(15, 0, SEEK_END) = 413347799
<0.000006><br>
0.000033 [ 370640d510] write(15, "Apr 1 15:21:49 gwsinam03
postfi"..., 68) = 68 <0.000023></font></tt></td>
</tr>
</tbody>
</table>
<font size="-1"><font face="Helvetica, Arial, sans-serif">As you can
see, its sitting on that poll for 4 seconds before continuing.<br>