<div dir="ltr">Hi,<div><br></div><div>As Laci pointed out, this is an expected behavior.</div><div>Named pipes are not regular files, the "file size" is always 0 byte.</div><div><br></div><div>From <a href="https://linux.die.net/man/4/fifo" target="_blank">https://linux.die.net/man/4/fifo</a>:</div><div><i>When processes are exchanging data via the FIFO, the kernel passes all data internally without writing it to the file system.</i></div><div><br></div><div>If you are interested in the capacity of named pipes, you can read about this here:</div><div><a href="https://linux.die.net/man/7/pipe" target="_blank">https://linux.die.net/man/7/pipe</a> (Chapter name: Pipe capacity)<br></div><div><br></div><div>--</div><div>László Várady</div><div dir="ltr"><br><div class="gmail_quote"><div dir="ltr">On Fri, Oct 27, 2017 at 4:56 PM Amin, Jitesh CTR (US) <<a href="mailto:jitesh.amin.ctr@mail.mil" target="_blank">jitesh.amin.ctr@mail.mil</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div>
<div style="direction:ltr;font-family:Tahoma;color:#000000;font-size:10pt">Hi Laci,
<div>So we can create named pipe object with filename successfully.</div>
<div><br>
</div>
<div>But the then the file always shows 0 bytes in size even after data is being written to this file. Additionally the timestamp on this file never changes (as new data get's written and so I would assume that modify date on file would also be updated).</div>
<div><br>
</div>
<div>Thanks</div>
<div>Jitesh<br>
<div style="font-family:Times New Roman;color:#000000;font-size:16px">
<hr>
<div id="m_2442931521500850090m_-9111524537336605818divRpF399686" style="direction:ltr"><font face="Tahoma" size="2" color="#000000"><b>From:</b> syslog-ng [<a href="mailto:syslog-ng-bounces@lists.balabit.hu" target="_blank">syslog-ng-bounces@lists.balabit.hu</a>] on behalf of Szemere, László [<a href="mailto:laszlo.szemere@balabit.com" target="_blank">laszlo.szemere@balabit.com</a>]<br>
<b>Sent:</b> Friday, October 27, 2017 9:46 AM<br>
<b>To:</b> Syslog-ng users' and developers' mailing list<br>
<b>Subject:</b> [Non-DoD Source] Re: [syslog-ng] Syslog 3.5 (pipe file issue)<br>
</font><br>
</div>
<div></div>
<div>All active links contained in this email were disabled. Please verify the identity of the sender, and confirm the authenticity of all links contained within the message prior to copying and pasting the address to a Web browser.
<br>
<br>
<hr>
<br>
<br>
<div dir="ltr">Hello Jitesh,
<div><br>
</div>
<div> I am afraid I can not clearly understand your problem. Since OSE 3.0.2, a named pipe destination creates a new pipe object automatically with the predefined filename. (Caution-<a href="https://www.balabit.com/documents/syslog-ng-ose-3.11-guides/en/syslog-ng-ose-guide-admin/html-single/index.html#configuring-destinations-pipe" target="_blank">https://www.balabit.com/documents/syslog-ng-ose-3.11-guides/en/syslog-ng-ose-guide-admin/html-single/index.html#configuring-destinations-pipe</a> < Caution-<a href="https://www.balabit.com/documents/syslog-ng-ose-3.11-guides/en/syslog-ng-ose-guide-admin/html-single/index.html#configuring-destinations-pipe" target="_blank">https://www.balabit.com/documents/syslog-ng-ose-3.11-guides/en/syslog-ng-ose-guide-admin/html-single/index.html#configuring-destinations-pipe</a> > )</div>
<div><br>
</div>
<div> For me, this is the expected behavior of named pipes (man page: Caution-<a href="http://man7.org/linux/man-pages/man1/mkfifo.1.html" target="_blank">http://man7.org/linux/man-pages/man1/mkfifo.1.html</a> < Caution-<a href="http://man7.org/linux/man-pages/man1/mkfifo.1.html" target="_blank">http://man7.org/linux/man-pages/man1/mkfifo.1.html</a> > further information on level 3: Caution-<a href="http://man7.org/linux/man-pages/man3/mkfifo.3.html" target="_blank">http://man7.org/linux/man-pages/man3/mkfifo.3.html</a> < Caution-<a href="http://man7.org/linux/man-pages/man3/mkfifo.3.html" target="_blank">http://man7.org/linux/man-pages/man3/mkfifo.3.html</a> > ).
Please try to rephrase your question, to give us more understanding about your use case.<br>
</div>
<div><br>
</div>
<div>Br,</div>
<div>Laci</div>
<div><br>
</div>
<div><br>
</div>
<div><br>
</div>
</div>
<div class="gmail_extra"><br>
<div class="gmail_quote"></div></div></div></div></div></div></div><div><div style="direction:ltr;font-family:Tahoma;color:#000000;font-size:10pt"><div><div style="font-family:Times New Roman;color:#000000;font-size:16px"><div><div class="gmail_extra"><div class="gmail_quote">On Fri, Oct 27, 2017 at 2:42 PM, Amin, Jitesh CTR (US) <span dir="ltr">
<<a href="mailto:jitesh.amin.ctr@mail.mil" target="_blank">jitesh.amin.ctr@mail.mil</a> < Caution-mailto:<a href="mailto:jitesh.amin.ctr@mail.mil" target="_blank">jitesh.amin.ctr@mail.mil</a> > ></span> wrote:<br>
</div></div></div></div></div></div></div><div><div style="direction:ltr;font-family:Tahoma;color:#000000;font-size:10pt"><div><div style="font-family:Times New Roman;color:#000000;font-size:16px"><div><div class="gmail_extra"><div class="gmail_quote"><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div>
<div style="direction:ltr;font-family:Tahoma;color:#000000;font-size:10pt">
<div style="font-family:Times New Roman;color:#000000;font-size:16px">
<div id="m_2442931521500850090m_-9111524537336605818m_-5402342489171244302divRpF162219" style="direction:ltr"><span style="font-family:Tahoma;font-size:10pt">Hi,</span></div>
<div>
<div style="direction:ltr;font-family:Tahoma;color:#000000;font-size:10pt">
<div>We have the syslog-ng 3.5 installed on Linux OS. We are trying to use the pipe function (to pipe data to the log file). This pipe file is FIFO.</div>
<div><br>
</div>
<div>One of the issues we are seeing is that, the file size of this pipe file is always ZERO and never grows and second the timestampe on the file never updates or changes.</div>
<div><br>
</div>
<div>Though when we do a "cat pipefilename" command we do see contents of the file.</div>
<div><br>
</div>
<div>Can you please let us know what we could be doing wrong or any feedback on how to resolve the issue?</div>
<div><br>
</div>
<div>Thanks</div>
<span class="m_2442931521500850090m_-9111524537336605818HOEnZb"><font color="#888888">
<div>Jitesh</div>
</font></span></div>
</div>
</div>
</div>
</div>
<br>
______________________________________________________________________________<br></blockquote></div></div></div></div></div></div></div><div><div style="direction:ltr;font-family:Tahoma;color:#000000;font-size:10pt"><div><div style="font-family:Times New Roman;color:#000000;font-size:16px"><div><div class="gmail_extra"><div class="gmail_quote"><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
Member info: Caution-<a href="https://lists.balabit.hu/" target="_blank">https://lists.balabit.hu/</a>mailman/listinfo/syslog-ng < Caution-<a href="https://lists.balabit.hu/mailman/listinfo/syslog-ng" target="_blank">https://lists.balabit.hu/mailman/listinfo/syslog-ng</a> > <br>
Documentation: Caution-<a href="http://www.balabit.com/" target="_blank">http://www.balabit.com/</a>support/documentation/?product=syslog-ng < Caution-<a href="http://www.balabit.com/support/documentation/?product=syslog-ng" target="_blank">http://www.balabit.com/support/documentation/?product=syslog-ng</a> > <br>
FAQ: Caution-<a href="http://www.balabit.com/wiki/" target="_blank">http://www.balabit.com/wiki/</a>syslog-ng-faq < Caution-<a href="http://www.balabit.com/wiki/syslog-ng-faq" target="_blank">http://www.balabit.com/wiki/syslog-ng-faq</a> > <br>
<br>
<br>
</blockquote>
</div>
<br>
</div>
</div>
</div>
</div>
</div>
</div>
______________________________________________________________________________<br>
Member info: <a href="https://lists.balabit.hu/mailman/listinfo/syslog-ng" rel="noreferrer" target="_blank">https://lists.balabit.hu/mailman/listinfo/syslog-ng</a><br>
Documentation: <a href="http://www.balabit.com/support/documentation/?product=syslog-ng" rel="noreferrer" target="_blank">http://www.balabit.com/support/documentation/?product=syslog-ng</a><br>
FAQ: <a href="http://www.balabit.com/wiki/syslog-ng-faq" rel="noreferrer" target="_blank">http://www.balabit.com/wiki/syslog-ng-faq</a><br>
<br>
</blockquote></div></div></div>