<tt><font size=2>syslog-ng-bounces@lists.balabit.hu wrote on 12/07/2011
06:02:57:<br>
<br>
> I did, on the other hand, try running strace on syslog-ng and this
is<br>
> was I got just before my harddrive would wake up, every time:<br>
> </font></tt><a href="http://pastebin.com/raw.php?i=hFZVurBP"><tt><font size=2>http://pastebin.com/raw.php?i=hFZVurBP</font></tt></a><tt><font size=2><br>
> <br>
> What can you make from this strace output? The same pattern was<br>
> repeated again and again. I guess "/usr/sbin/cr" is the
cut-off path<br>
> to crond.<br>
</font></tt>
<br><tt><font size=2>Try an 'lsof -p <syslog-ng pid>' to identify
what file descriptors 9, 10 and 11 are; that will tell you what files it
is polling (or, judging by the write()s, updating) on each occasion. It
would appear you haven't successfully disabled cron's logging in your syslog-ng
configuration.</font></tt>
<br>
<br><tt><font size=2>Regards,</font></tt>
<br>
<br><tt><font size=2>Scott Rochford<br>
<br>
<br>
<br>
</font></tt>