hello, i ran a lsof right before starting syslog-ng in the boot script, but i can't find a reference to /proc/kmsg, output below. the same after boot has completed. if i run syslog-ng with /pro/kmsg enables as a source lsof does show it, so lsof is working... so it looks like some it only reading /proc/kmsg once/shortly and terminates afterwards!? regards, heiko COMMAND PID USER FD TYPE DEVICE SIZE NODE NAME init 1 root cwd DIR 1,0 1024 2 / init 1 root rtd DIR 1,0 1024 2 / init 1 root txt REG 1,0 46840 2501 /etc/init init 1 root mem REG 1,0 837 421 /etc/localtime init 1 root 10u FIFO 1,0 173 /dev/initctl keventd 2 root cwd DIR 1,0 1024 2 / keventd 2 root rtd DIR 1,0 1024 2 / keventd 2 root txt unknown /proc/2/exe ksoftirqd 3 root cwd DIR 1,0 1024 2 / ksoftirqd 3 root rtd DIR 1,0 1024 2 / ksoftirqd 3 root txt unknown /proc/3/exe kswapd 4 root cwd DIR 1,0 1024 2 / kswapd 4 root rtd DIR 1,0 1024 2 / kswapd 4 root txt unknown /proc/4/exe bdflush 5 root cwd DIR 1,0 1024 2 / bdflush 5 root rtd DIR 1,0 1024 2 / bdflush 5 root txt unknown /proc/5/exe kupdated 6 root cwd DIR 1,0 1024 2 / kupdated 6 root rtd DIR 1,0 1024 2 / kupdated 6 root txt unknown /proc/6/exe khubd 12 root cwd DIR 1,0 1024 2 / khubd 12 root rtd DIR 1,0 1024 2 / khubd 12 root txt unknown /proc/12/exe rc 623 root cwd DIR 1,0 1024 2 / rc 623 root rtd DIR 1,0 1024 2 / rc 623 root txt REG 240,0 690668 238140 /KNOPPIX/bin/bash rc 623 root mem REG 240,0 92174 1714634 /KNOPPIX/lib/ld-2.3.2.so rc 623 root mem REG 240,0 238192 1720746 /KNOPPIX/lib/libncurses.so.5.3 rc 623 root mem REG 240,0 9796 1719266 /KNOPPIX/lib/libdl-2.3.2.so rc 623 root mem REG 240,0 1230864 1716224 /KNOPPIX/lib/libc-2.3.2.so rc 623 root mem REG 240,0 27252 1721344 /KNOPPIX/lib/libnss_compat-2.3.2.so rc 623 root mem REG 240,0 73260 1721036 /KNOPPIX/lib/libnsl-2.3.2.so rc 623 root mem REG 240,0 32304 1722680 /KNOPPIX/lib/libnss_nis-2.3.2.so rc 623 root mem REG 240,0 34440 1721968 /KNOPPIX/lib/libnss_files-2.3.2.so rc 623 root 0u CHR 4,0 16 /dev/console rc 623 root 1u CHR 4,0 16 /dev/console rc 623 root 2u CHR 4,0 16 /dev/console rc 623 root 255r REG 240,0 1723 1076588 /KNOPPIX/etc/init.d/rc S99bootlo 658 root cwd DIR 1,0 1024 2 / S99bootlo 658 root rtd DIR 1,0 1024 2 / S99bootlo 658 root txt REG 240,0 690668 238140 /KNOPPIX/bin/bash S99bootlo 658 root mem REG 240,0 92174 1714634 /KNOPPIX/lib/ld-2.3.2.so S99bootlo 658 root mem REG 240,0 238192 1720746 /KNOPPIX/lib/libncurses.so.5.3 S99bootlo 658 root mem REG 240,0 9796 1719266 /KNOPPIX/lib/libdl-2.3.2.so S99bootlo 658 root mem REG 240,0 1230864 1716224 /KNOPPIX/lib/libc-2.3.2.so S99bootlo 658 root mem REG 240,0 27252 1721344 /KNOPPIX/lib/libnss_compat-2.3.2.so S99bootlo 658 root mem REG 240,0 73260 1721036 /KNOPPIX/lib/libnsl-2.3.2.so S99bootlo 658 root mem REG 240,0 32304 1722680 /KNOPPIX/lib/libnss_nis-2.3.2.so S99bootlo 658 root mem REG 240,0 34440 1721968 /KNOPPIX/lib/libnss_files-2.3.2.so S99bootlo 658 root 0u CHR 4,0 16 /dev/console S99bootlo 658 root 1u CHR 4,0 16 /dev/console S99bootlo 658 root 2u CHR 4,0 16 /dev/console S99bootlo 658 root 255r REG 0,7 3831 3039 /ramdisk/opt/bootlocal.sh ntpd 681 root cwd DIR 1,0 1024 2 / ntpd 681 root rtd DIR 1,0 1024 2 / ntpd 681 root txt REG 0,7 35580 3311 /ramdisk/opt/openntpd/sbin/ntpd ntpd 681 root mem REG 240,0 92174 1714634 /KNOPPIX/lib/ld-2.3.2.so ntpd 681 root mem REG 240,0 1230864 1716224 /KNOPPIX/lib/libc-2.3.2.so ntpd 681 root mem REG 240,0 27252 1721344 /KNOPPIX/lib/libnss_compat-2.3.2.so ntpd 681 root mem REG 240,0 73260 1721036 /KNOPPIX/lib/libnsl-2.3.2.so ntpd 681 root mem REG 240,0 32304 1722680 /KNOPPIX/lib/libnss_nis-2.3.2.so ntpd 681 root mem REG 240,0 34440 1721968 /KNOPPIX/lib/libnss_files-2.3.2.so ntpd 681 root 0r CHR 1,3 214 /dev/null ntpd 681 root 1u CHR 4,0 16 /dev/console ntpd 681 root 2u CHR 4,0 16 /dev/console ntpd 681 root 3r CHR 1,9 412 /dev/urandom ntpd 681 root 4u unix 0xdf491a90 15111 socket ntpd 684 _ntp cwd DIR 0,7 40 3301 /ramdisk/var/empty ntpd 684 _ntp rtd DIR 0,7 40 3301 /ramdisk/var/empty ntpd 684 _ntp txt REG 0,7 35580 3311 /ramdisk/opt/openntpd/sbin/ntpd ntpd 684 _ntp mem REG 240,0 92174 1714634 /KNOPPIX/lib/ld-2.3.2.so ntpd 684 _ntp mem REG 240,0 1230864 1716224 /KNOPPIX/lib/libc-2.3.2.so ntpd 684 _ntp mem REG 240,0 27252 1721344 /KNOPPIX/lib/libnss_compat-2.3.2.so ntpd 684 _ntp mem REG 240,0 73260 1721036 /KNOPPIX/lib/libnsl-2.3.2.so ntpd 684 _ntp mem REG 240,0 32304 1722680 /KNOPPIX/lib/libnss_nis-2.3.2.so ntpd 684 _ntp mem REG 240,0 34440 1721968 /KNOPPIX/lib/libnss_files-2.3.2.so ntpd 684 _ntp 0u CHR 1,3 214 /dev/null ntpd 684 _ntp 1u CHR 1,3 214 /dev/null ntpd 684 _ntp 2u CHR 1,3 214 /dev/null ntpd 684 _ntp 3r CHR 1,9 412 /dev/urandom ntpd 684 _ntp 4u IPv4 15115 UDP 10.24.254.40:32768->10.27.1.110:ntp ntpd 684 _ntp 5u unix 0xdff0d060 15112 socket ntpd 684 _ntp 6u IPv4 15116 UDP 10.24.254.40:32769->10.27.1.111:ntp lsof 695 root cwd DIR 1,0 1024 2 / lsof 695 root rtd DIR 1,0 1024 2 / lsof 695 root txt REG 8,1 120697 35485 /data/bin/lsof lsof 695 root mem REG 240,0 92174 1714634 /KNOPPIX/lib/ld-2.3.2.so lsof 695 root mem REG 240,0 1230864 1716224 /KNOPPIX/lib/libc-2.3.2.so lsof 695 root 0u CHR 4,0 16 /dev/console lsof 695 root 1w REG 8,1 0 14 /data/lsof.out lsof 695 root 2u CHR 4,0 16 /dev/console lsof 695 root 3r DIR 0,2 0 1 /proc lsof 695 root 4r DIR 0,2 0 45547528 /proc/695/fd lsof 695 root 5w FIFO 0,5 15509 pipe lsof 695 root 6r FIFO 0,5 15510 pipe lsof 696 root cwd DIR 1,0 1024 2 / lsof 696 root rtd DIR 1,0 1024 2 / lsof 696 root txt REG 8,1 120697 35485 /data/bin/lsof lsof 696 root mem REG 240,0 92174 1714634 /KNOPPIX/lib/ld-2.3.2.so lsof 696 root mem REG 240,0 1230864 1716224 /KNOPPIX/lib/libc-2.3.2.so lsof 696 root 4r FIFO 0,5 15509 pipe lsof 696 root 7w FIFO 0,5 15510 pipe
On Wed, 2006-11-22 at 12:53 +0100, Heiko Blume wrote:
Hello,
telling from the process table there are no other logd's (see below). But i have to admit that i do not know how to check for the "/proc/kmsg" sources you mention. i haven't been into logging like this before :-)
however, removing the
file("/proc/kmsg" log_prefix("kernel: "));
from the source has fixed the hanging problem. but why? i certainly don't want to miss any messages...
something else is reading /proc/kmsg in addition to syslog-ng, and in this case, the one losing the race condition blocks, until the next kernel message.
-- Bazsi
_______________________________________________ syslog-ng maillist - syslog-ng@lists.balabit.hu https://lists.balabit.hu/mailman/listinfo/syslog-ng Frequently asked questions at http://www.campin.net/syslog-ng/faq.html
-- Heiko@Blume.AG Cisco Certified Network Professional Cisco Certified Design Professional Juniper Certified Internet Specialist SUN Certified System Administrator Office: +49.30/4426309 FAX: +49.30/48494354 Mobile: +49.178/6662342 www: http://www.blume.ag/IT/ PHY: Knaackstrasse 6, 10405 Berlin, DE