Hi I went to acheck what is the situation in the firewall log file and here is what I found: Dec 27 16:22:27 fwmgmt/fwmgmt logger: 10:00:19 drop .... The date on fwmgmt is set correctly and shows the current time. TIA Paolo PS - I will try to remove the firewall logging and see if it will make a difference. --- Balazs Scheidler <bazsi@balabit.hu> wrote:
On Mon, 2005-12-26 at 03:14 -0800, Paolo Supino wrote:
Hi
Here is an update on the interval in writing to the log file: the output of ls -l on the file: -rw-r--r-- 1 root root 6234 Dec 26 08:03 switch-01.log and the last messsege coming in on the NIC (captured by tcpdump): 12:56:57.564348 IP switch-01.1024 > syslog.hot.net.il.syslog: UDP, length 75 As you can see the time interval is almost 5 hours... :-(
I can't see how this could happen, log_fifo_size only specifies the maximum size of the buffer and does not increase write latency on its own.
Does the message arrive to the destination at the end? Because if it is not then probably it is an unrelated issue. The only thing that affects write latency is sync()
-- Bazsi
_______________________________________________ syslog-ng maillist - syslog-ng@lists.balabit.hu https://lists.balabit.hu/mailman/listinfo/syslog-ng Frequently asked questions at http://www.campin.net/syslog-ng/faq.html
__________________________________________ Yahoo! DSL Something to write home about. Just $16.99/mo. or less. dsl.yahoo.com