Re: [syslog-ng] lsof shows open files which should be closed

On Thu, 2007-12-20 at 12:31 -0800, Evan Rempel wrote:

I know nothing of the timer architecture used within syslog-ng, but just to create discussion, could it be that a completed timer is missed? Something like one timer completes and while it is being processed (the file is being closed/reaped) another timer completes which is missed. This would probably only show up on systems that have been configured to log to a large number of files.

No, this is not possible. syslog-ng is single threaded and the timer in glib fires every now and then. The reap timeout specified in the configuration is 10 seconds. I still think that my patch is correct, that's the only possible explanation. But let's wait for the results of the test. -- Bazsi