I looked both /etc/rc.d/rc3.d and /etc/rc.d/rc5.d, and other rcx.d directories. Only one "S" script for syslog-ng and it's symbolic link to /etc/init.d/syslog-ng. All files under rcx.d directory are symbolic links.
 
Do you know if the first occurance of "Starting syslog-ng:" or "Stopping syslog-ng:" comes from syslog-ng binary file?
 
Thanks
Xuan

 
> Date: Thu, 18 Feb 2010 11:09:55 -0600
> From: wes.hardin@maxim-ic.com
> To: syslog-ng@lists.balabit.hu
> Subject: Re: [syslog-ng] syslog-ng gets started twice when system reboots
>
> On 02/17/2010 09:59 AM, Xuan Zhong wrote:
> >
> > I use the stable version syslog-ng-3.0.5-1.rhel5.x86_64.rpm downloaded
> > from your website. It starts/stops twice only when the system reboots.
> > The init script is only generated once. The second "Starting syslog-ng:
> > [ok]" was generated by init script because I modified the init script
> > text display and only the second start changed. Not sure where the first
> > start comes from.
> >
> > Starting syslog-ng: Starting syslog-ng: [ok]
> > [ok]
> >
> >
> > When the system shuts down, I saw the following:
> > Stopping syslog-ng: Stopping syslog-ng: [ok]
> > [ok]
> >
> >
> > Similarly, only the second "Stopping syslog-ng:" comes from the
> > syslog-ng service script.
>
> Look in /etc/rc.d/rc{3,5}.d for multiple "S" scripts for syslog-ng. Everything
> in the rc?.d directories is typically a symlink to a similarly named script in
> /etc/rc.d/init.d (usually a relative link like ../init.d/script).
>
> If there is a file that isn't a symlink or doesn't link to an initscript in
> /etc/rc.d/init.d, that should be considered suspicious.
> --
> /* Wes Hardin */

---

Hotmail: Trusted email with Microsoft’s powerful SPAM protection. Sign up now.