I looked both /etc/rc.d/rc3.d and /etc/rc.d/rc5.d, and other rcx.d directories. Only one "S" script for syslog-ng and it's symbolic link to /etc/init.d/syslog-ng. All files under rcx.d directory are symbolic links. Do you know if the first occurance of "Starting syslog-ng:" or "Stopping syslog-ng:" comes from syslog-ng binary file? Thanks Xuan
Date: Thu, 18 Feb 2010 11:09:55 -0600 From: wes.hardin@maxim-ic.com To: syslog-ng@lists.balabit.hu Subject: Re: [syslog-ng] syslog-ng gets started twice when system reboots
On 02/17/2010 09:59 AM, Xuan Zhong wrote:
I use the stable version syslog-ng-3.0.5-1.rhel5.x86_64.rpm downloaded from your website. It starts/stops twice only when the system reboots. The init script is only generated once. The second "Starting syslog-ng: [ok]" was generated by init script because I modified the init script text display and only the second start changed. Not sure where the first start comes from.
Starting syslog-ng: Starting syslog-ng: [ok] [ok]
When the system shuts down, I saw the following: Stopping syslog-ng: Stopping syslog-ng: [ok] [ok]
Similarly, only the second "Stopping syslog-ng:" comes from the syslog-ng service script.
Look in /etc/rc.d/rc{3,5}.d for multiple "S" scripts for syslog-ng. Everything in the rc?.d directories is typically a symlink to a similarly named script in /etc/rc.d/init.d (usually a relative link like ../init.d/script).
If there is a file that isn't a symlink or doesn't link to an initscript in /etc/rc.d/init.d, that should be considered suspicious. -- /* Wes Hardin */
_________________________________________________________________ Hotmail: Trusted email with Microsoft’s powerful SPAM protection. http://clk.atdmt.com/GBL/go/201469226/direct/01/