<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<meta content="text/html;charset=ISO-8859-1" http-equiv="Content-Type">
</head>
<body bgcolor="#ffffff" text="#0050d0">
<font size="-1"><font face="Helvetica, Arial, sans-serif">What os are
you running, and what command are you using to generate that output (ps
with what args)?<br>
Syslog-ng 3+ will fork itself off and the child becomes the real worker
process while the parent is a monitor process so that if the child dies
it can restart it. At least thats what its supposed to do. I've never
had it work, but it doesnt crash so I dont care.<br>
</font></font><br>
Sent: Tuesday, August 03, 2010 3:47:53 PM<br>
From: Manson, John <a class="moz-txt-link-rfc2396E" href="mailto:John.Manson@mail.house.gov"><John.Manson@mail.house.gov></a><br>
To: '<a class="moz-txt-link-abbreviated" href="mailto:syslog-ng@lists.balabit.hu">syslog-ng@lists.balabit.hu</a>' <a class="moz-txt-link-rfc2396E" href="mailto:syslog-ng@lists.balabit.hu"><syslog-ng@lists.balabit.hu></a> <br>
Subject: [syslog-ng] 2 syslogng processes for the price of 1
<blockquote
cite="mid:3077E3FF3C87A34A9BA201CB9876AABAB49EB033A4@HRM25.US.House.gov"
type="cite">
<meta http-equiv="Content-Type" content="text/html; ">
<meta name="Generator" content="Microsoft Exchange Server">
<!-- converted from rtf -->
<style><!-- .EmailQuote { margin-left: 1pt; padding-left: 4pt; border-left: #800000 2px solid; } --></style><font
face="Georgia, serif" size="3">
<div>Good Day,</div>
<div> </div>
<div>I start syslog-ng, ver3.0.4, from /usr/local/sbin using the same
script I run with older versions of ng on other servers but this is the
first time I have seem 2 processes started.</div>
<div>Ng is loading the correct conf file at
/usr/local/etc/syslog-ng.conf and is writing log messages to the
correct log files, no duplicate entries.</div>
<div>Always 2 pids in sequence.</div>
<div>If I kill the smaller pid, 3532 in this case, the ppid of 1
takes over for 3532 and ng, 3533, runs along just fine.</div>
<div>Help?</div>
<div><font face="Times New Roman, serif"> </font></div>
<div>Thanks</div>
<div><font face="Times New Roman, serif"> </font></div>
<div>root 3532 1 0 15:09:54 pts/2 0:00
/usr/local/sbin/syslog-ng -p /usr/local/etc/syslog-ng/syslog-ng.pid</div>
<div>root 3533 3532 0 15:09:54 ? 0:00
/usr/local/sbin/syslog-ng -p /usr/local/etc/syslog-ng/syslog-ng.pid</div>
<div><font face="Times New Roman, serif"> </font></div>
<a moz-do-not-send="true" name="_MailAutoSig"></a>
<div><font face="Century Gothic, sans-serif"> </font></div>
<div><font size="2">John Manson </font></div>
<div><font color="#808080" face="Palatino Linotype, serif" size="2">CAO/HIR/NI/Data-Communications
| U.S. House of Representatives | Washington, DC 20515</font></div>
<div><font color="#808080" face="Palatino Linotype, serif" size="2">Desk:
202-226-4244 | Team: 202-225-5552 | <a class="moz-txt-link-abbreviated" href="mailto:john.manson@mail.house.gov">john.manson@mail.house.gov</a></font></div>
<div><font color="#000080" face="Times New Roman, serif"> </font></div>
<div><font color="#000080" face="Times New Roman, serif"> </font></div>
<div><font face="Times New Roman, serif"> </font></div>
<div><font face="Times New Roman, serif"> </font></div>
</font>
<pre wrap="">
<hr size="4" width="90%">
______________________________________________________________________________
Member info: <a class="moz-txt-link-freetext" href="https://lists.balabit.hu/mailman/listinfo/syslog-ng">https://lists.balabit.hu/mailman/listinfo/syslog-ng</a>
Documentation: <a class="moz-txt-link-freetext" href="http://www.balabit.com/support/documentation/?product=syslog-ng">http://www.balabit.com/support/documentation/?product=syslog-ng</a>
FAQ: <a class="moz-txt-link-freetext" href="http://www.campin.net/syslog-ng/faq.html">http://www.campin.net/syslog-ng/faq.html</a>
</pre>
</blockquote>
</body>
</html>