The patch did not solve the problem. Syslog-ng appears to loop over the empty source file.<br><br>strace -rp<br><br>     0.000086 stat(&quot;/var/log/applogs/mysql/<div id=":ec">mysqld.log&quot;, {st_mode=S_IFREG|0640, st_size=0, ...}) = 0<br>

     0.000130 open(&quot;/var/log/applogs/mysql/mysqld.log&quot;, O_RDONLY|O_NOCTTY|O_NONBLOCK) = 10<br>     0.000082 fcntl(10, F_GETFD)        = 0<br>     0.000065 fcntl(10, F_SETFD, FD_CLOEXEC) = 0<br>     0.000063 capget(0x19980330, 0, {CAP_DAC_OVERRIDE|CAP_SYS_ADMIN, CAP_CHOWN|CAP_DAC_OVERRIDE|CAP_DAC_READ_SEARCH|CAP_FOWNER|CAP_NET_BIND_SERVICE|CAP_NET_BROADCAST|CAP_NET_RAW|CAP_SYS_ADMIN, 0}) = 0<br>

     0.000076 capset(0x19980330, 0, {CAP_CHOWN|CAP_DAC_OVERRIDE|CAP_SYS_ADMIN, CAP_CHOWN|CAP_DAC_OVERRIDE|CAP_DAC_READ_SEARCH|CAP_FOWNER|CAP_NET_BIND_SERVICE|CAP_NET_BROADCAST|CAP_NET_RAW|CAP_SYS_ADMIN, 0}) = 0<br>     0.000078 capget(0x19980330, 0, {CAP_CHOWN|CAP_DAC_OVERRIDE|CAP_SYS_ADMIN, CAP_CHOWN|CAP_DAC_OVERRIDE|CAP_DAC_READ_SEARCH|CAP_FOWNER|CAP_NET_BIND_SERVICE|CAP_NET_BROADCAST|CAP_NET_RAW|CAP_SYS_ADMIN, 0}) = 0<br>

     0.000076 capset(0x19980330, 0, {CAP_CHOWN|CAP_DAC_OVERRIDE|CAP_FOWNER|CAP_SYS_ADMIN, CAP_CHOWN|CAP_DAC_OVERRIDE|CAP_DAC_READ_SEARCH|CAP_FOWNER|CAP_NET_BIND_SERVICE|CAP_NET_BROADCAST|CAP_NET_RAW|CAP_SYS_ADMIN, 0}) = 0<br>

     0.000077 capset(0x19980330, 0, {CAP_SYS_ADMIN, CAP_CHOWN|CAP_DAC_OVERRIDE|CAP_DAC_READ_SEARCH|CAP_FOWNER|CAP_NET_BIND_SERVICE|CAP_NET_BROADCAST|CAP_NET_RAW|CAP_SYS_ADMIN, 0}) = 0<br>     0.000083 fstat(10, {st_mode=S_IFREG|0640, st_size=0, ...}) = 0<br>

     0.000110 lseek(10, 0, SEEK_SET)    = 0<br>     0.000069 lseek(10, 10, SEEK_SET)   = 10<br>     0.000063 stat(&quot;/var/log/applogs/mysql/mysqld.log&quot;, {st_mode=S_IFREG|0640, st_size=0, ...}) = 0<br>     0.000122 close(14)                 = 0<br>

     0.000093 lseek(10, 0, SEEK_CUR)    = 10<br>     0.000090 fstat(10, {st_mode=S_IFREG|0640, st_size=0, ...}) = 0<br>     0.000116 capget(0x19980330, 0, {CAP_SYS_ADMIN, CAP_CHOWN|CAP_DAC_OVERRIDE|CAP_DAC_READ_SEARCH|CAP_FOWNER|CAP_NET_BIND_SERVICE|CAP_NET_BROADCAST|CAP_NET_RAW|CAP_SYS_ADMIN, 0}) = 0<br>

     0.000079 capget(0x19980330, 0, {CAP_SYS_ADMIN, CAP_CHOWN|CAP_DAC_OVERRIDE|CAP_DAC_READ_SEARCH|CAP_FOWNER|CAP_NET_BIND_SERVICE|CAP_NET_BROADCAST|CAP_NET_RAW|CAP_SYS_ADMIN, 0}) = 0<br>     0.000074 capset(0x19980330, 0, {CAP_DAC_OVERRIDE|CAP_SYS_ADMIN, CAP_CHOWN|CAP_DAC_OVERRIDE|CAP_DAC_READ_SEARCH|CAP_FOWNER|CAP_NET_BIND_SERVICE|CAP_NET_BROADCAST|CAP_NET_RAW|CAP_SYS_ADMIN, 0}) = 0<br>

     0.000076 stat(&quot;/var/log/applogs/mysql/mysqld.log&quot;, {st_mode=S_IFREG|0640, st_size=0, ...}) = 0<br>     0.000135 open(&quot;/var/log/applogs/mysql/mysqld.log&quot;, O_RDONLY|O_NOCTTY|O_NONBLOCK) = 14<br>     0.000084 fcntl(14, F_GETFD)        = 0<br>

     0.000062 fcntl(14, F_SETFD, FD_CLOEXEC) = 0<br>     0.000060 capget(0x19980330, 0, {CAP_DAC_OVERRIDE|CAP_SYS_ADMIN, CAP_CHOWN|CAP_DAC_OVERRIDE|CAP_DAC_READ_SEARCH|CAP_FOWNER|CAP_NET_BIND_SERVICE|CAP_NET_BROADCAST|CAP_NET_RAW|CAP_SYS_ADMIN, 0}) = 0<br>

     0.000074 capset(0x19980330, 0, {CAP_CHOWN|CAP_DAC_OVERRIDE|CAP_SYS_ADMIN, CAP_CHOWN|CAP_DAC_OVERRIDE|CAP_DAC_READ_SEARCH|CAP_FOWNER|CAP_NET_BIND_SERVICE|CAP_NET_BROADCAST|CAP_NET_RAW|CAP_SYS_ADMIN, 0}) = 0<br>     0.000075 capget(0x19980330, 0, {CAP_CHOWN|CAP_DAC_OVERRIDE|CAP_SYS_ADMIN, CAP_CHOWN|CAP_DAC_OVERRIDE|CAP_DAC_READ_SEARCH|CAP_FOWNER|CAP_NET_BIND_SERVICE|CAP_NET_BROADCAST|CAP_NET_RAW|CAP_SYS_ADMIN, 0}) = 0<br>

     0.000075 capset(0x19980330, 0, {CAP_CHOWN|CAP_DAC_OVERRIDE|CAP_FOWNER|CAP_SYS_ADMIN, CAP_CHOWN|CAP_DAC_OVERRIDE|CAP_DAC_READ_SEARCH|CAP_FOWNER|CAP_NET_BIND_SERVICE|CAP_NET_BROADCAST|CAP_NET_RAW|CAP_SYS_ADMIN, 0}) = 0<br>

     0.000075 capset(0x19980330, 0, {CAP_SYS_ADMIN, CAP_CHOWN|CAP_DAC_OVERRIDE|CAP_DAC_READ_SEARCH|CAP_FOWNER|CAP_NET_BIND_SERVICE|CAP_NET_BROADCAST|CAP_NET_RAW|CAP_SYS_ADMIN, 0}) = 0<br>     0.000085 fstat(14, {st_mode=S_IFREG|0640, st_size=0, ...}) = 0<br>

     0.000109 lseek(14, 0, SEEK_SET)    = 0<br>     0.000062 lseek(14, 10, SEEK_SET)   = 10<br>     0.000060 stat(&quot;/var/log/applogs/mysql/mysqld.log&quot;, {st_mode=S_IFREG|0640, st_size=0, ...}) = 0<br>     0.000122 close(10)                 = 0<br>

     0.000067 lseek(14, 0, SEEK_CUR)    = 10<br>     0.000060 fstat(14, {st_mode=S_IFREG|0640, st_size=0, ...}) = 0<br>     0.000118 capget(0x19980330, 0, {CAP_SYS_ADMIN, CAP_CHOWN|CAP_DAC_OVERRIDE|CAP_DAC_READ_SEARCH|CAP_FOWNER|CAP_NET_BIND_SERVICE|CAP_NET_BROADCAST|CAP_NET_RAW|CAP_SYS_ADMIN, 0}) = 0<br>

     0.000123 capget(0x19980330, 0, {CAP_SYS_ADMIN, CAP_CHOWN|CAP_DAC_OVERRIDE|CAP_DAC_READ_SEARCH|CAP_FOWNER|CAP_NET_BIND_SERVICE|CAP_NET_BROADCAST|CAP_NET_RAW|CAP_SYS_ADMIN, 0}) = 0<br>     0.000078 capset(0x19980330, 0, {CAP_DAC_OVERRIDE|CAP_SYS_ADMIN, CAP_CHOWN|CAP_DAC_OVERRIDE|CAP_DAC_READ_SEARCH|CAP_FOWNER|CAP_NET_BIND_SERVICE|CAP_NET_BROADCAST|CAP_NET_RAW|CAP_SYS_ADMIN, 0}) = 0<br>

     0.000078 stat(&quot;/var/log/applogs/mysql/mysqld.log&quot;, {st_mode=S_IFREG|0640, st_size=0, ...}) = 0<br>     0.000134 open(&quot;/var/log/applogs/mysql/mysqld.log&quot;, O_RDONLY|O_NOCTTY|O_NONBLOCK) = 10<br>     0.000091 fcntl(10, F_GETFD)        = 0<br>

     0.000065 fcntl(10, F_SETFD, FD_CLOEXEC) = 0<br>     0.000069 capget(0x19980330, 0, {CAP_DAC_OVERRIDE|CAP_SYS_ADMIN, CAP_CHOWN|CAP_DAC_OVERRIDE|CAP_DAC_READ_SEARCH|CAP_FOWNER|CAP_NET_BIND_SERVICE|CAP_NET_BROADCAST|CAP_NET_RAW|CAP_SYS_ADMIN, 0}) = 0<br>

     0.000076 capset(0x19980330, 0, {CAP_CHOWN|CAP_DAC_OVERRIDE|CAP_SYS_ADMIN, CAP_CHOWN|CAP_DAC_OVERRIDE|CAP_DAC_READ_SEARCH|CAP_FOWNER|CAP_NET_BIND_SERVICE|CAP_NET_BROADCAST|CAP_NET_RAW|CAP_SYS_ADMIN, 0}) = 0<br>     0.000078 capget(0x19980330, 0, {CAP_CHOWN|CAP_DAC_OVERRIDE|CAP_SYS_ADMIN, CAP_CHOWN|CAP_DAC_OVERRIDE|CAP_DAC_READ_SEARCH|CAP_FOWNER|CAP_NET_BIND_SERVICE|CAP_NET_BROADCAST|CAP_NET_RAW|CAP_SYS_ADMIN, 0}) = 0<br>

     0.000077 capset(0x19980330, 0, {CAP_CHOWN|CAP_DAC_OVERRIDE|CAP_FOWNER|CAP_SYS_ADMIN, CAP_CHOWN|CAP_DAC_OVERRIDE|CAP_DAC_READ_SEARCH|CAP_FOWNER|CAP_NET_BIND_SERVICE|CAP_NET_BROADCAST|CAP_NET_RAW|CAP_SYS_ADMIN, 0}) = 0<br>

     0.000077 capset(0x19980330, 0, {CAP_SYS_ADMIN, CAP_CHOWN|CAP_DAC_OVERRIDE|CAP_DAC_READ_SEARCH|CAP_FOWNER|CAP_NET_BIND_SERVICE|CAP_NET_BROADCAST|CAP_NET_RAW|CAP_SYS_ADMIN, 0}) = 0<br>     0.000090 fstat(10, {st_mode=S_IFREG|0640, st_size=0, ...}) = 0<br>

     0.000111 lseek(10, 0, SEEK_SET)    = 0<br>     0.000065 lseek(10, 10, SEEK_SET)   = 10<br>     0.000064 stat(&quot;/var/log/applogs/mysql/mysqld.log&quot;, {st_mode=S_IFREG|0640, st_size=0, ...}) = 0<br>     0.000127 close(14)                 = 0<br>

     0.000069 lseek(10, 0, SEEK_CUR)    = 10<br>     0.000063 fstat(10, {st_mode=S_IFREG|0640, st_size=0, ...}) = 0<br>     0.000110 capget(0x19980330, 0, {CAP_SYS_ADMIN, CAP_CHOWN|CAP_DAC_OVERRIDE|CAP_DAC_READ_SEARCH|CAP_FOWNER|CAP_NET_BIND_SERVICE|CAP_NET_BROADCAST|CAP_NET_RAW|CAP_SYS_ADMIN, 0}) = 0<br>

     0.000078 capget(0x19980330, 0, {CAP_SYS_ADMIN, CAP_CHOWN|CAP_DAC_OVERRIDE|CAP_DAC_READ_SEARCH|CAP_FOWNER|CAP_NET_BIND_SERVICE|CAP_NET_BROADCAST|CAP_NET_RAW|CAP_SYS_ADMIN, 0}) = 0<br>     0.000078 capset(0x19980330, 0, {CAP_DAC_OVERRIDE|CAP_SYS_ADMIN, CAP_CHOWN|CAP_DAC_OVERRIDE|CAP_DAC_READ_SEARCH|CAP_FOWNER|CAP_NET_BIND_SERVICE|CAP_NET_BROADCAST|CAP_NET_RAW|CAP_SYS_ADMIN, 0}) = 0<br>

     0.000077 stat(&quot;/var/log/applogs/mysql/mysqld.log&quot;, {st_mode=S_IFREG|0640, st_size=0, ...}) = 0<br>     0.000124 open(&quot;/var/log/applogs/mysql/mysqld.log&quot;, O_RDONLY|O_NOCTTY|O_NONBLOCK) = 14<br>     0.000082 fcntl(14, F_GETFD)        = 0<br>

     0.000065 fcntl(14, F_SETFD, FD_CLOEXEC) = 0</div><br><br><div class="gmail_quote">On Wed, Feb 2, 2011 at 7:10 PM, Gergely Nagy <span dir="ltr">&lt;<a href="mailto:algernon@balabit.hu">algernon@balabit.hu</a>&gt;</span> wrote:<br>
<blockquote class="gmail_quote" style="margin: 0pt 0pt 0pt 0.8ex; border-left: 1px solid rgb(204, 204, 204); padding-left: 1ex;"><div class="im">On Wed, 2011-02-02 at 18:44 +0300, Mailing Lists wrote:<br>
&gt; This is RHEL 5.5 x86_64<br>
&gt;<br>
&gt; Linux lio-db8 2.6.18-194.11.4.el5xen #1 SMP Fri Sep 17 05:17:00 EDT<br>
&gt; 2010 x86_64 x86_64 x86_64 GNU/Linux<br>
&gt; gcc (GCC) 4.1.2 20080704 (Red Hat 4.1.2-48)<br>
&gt;<br>
&gt; In the meantime, do you know a version that doesn&#39;t have this bug, so<br>
&gt; I can work with it until youre working on a fix ?<br>
<br>
</div>Can you try the attached patch, if it fixes the issue?<br>
<br>
I&#39;ve seen this problem before, but never on Linux, and it was fairly<br>
hard to trigger. If it is what I think it is, then the attached patch<br>
should fix it.<br>
<font color="#888888"><br>
--<br>
|8]<br>
<br>
</font><br>______________________________________________________________________________<br>
Member info: <a href="https://lists.balabit.hu/mailman/listinfo/syslog-ng" target="_blank">https://lists.balabit.hu/mailman/listinfo/syslog-ng</a><br>
Documentation: <a href="http://www.balabit.com/support/documentation/?product=syslog-ng" target="_blank">http://www.balabit.com/support/documentation/?product=syslog-ng</a><br>
FAQ: <a href="http://www.campin.net/syslog-ng/faq.html" target="_blank">http://www.campin.net/syslog-ng/faq.html</a><br>
<br>
<br></blockquote></div><br>