On Tue, 2005-12-27 at 08:59 -0800, Paolo Supino wrote:
Hi
1. I checked weather /proc/kmsg is being read by 2 processes. It isn't. The only process reading the file is syslog-ng (and there is only 1 instance of syslog-ng running). 2. All systems that report to the syslog server have forward and backward resolving setup. Here is the output: forward lookup: # nslookup switch-01 Server: 192.168.200.101 Address: 192.168.200.101#53
Name: switch-01.company.net Address: 192.168.63.1
backward lookup: # nslookup 192.168.63.1 Server: 192.168.200.101 Address: 192.168.200.101#53
1.63.168.192.in-addr.arpa name = switch-01.company.net.
Everything looks OK ...
I understand that your DNS is set up correctly I was only wondering whether syslog-ng might block on DNS queries for some reason. I'm sure syslog-ng is doing something, either it is buffering data (because of sync) or is blocking on something. -- Bazsi