Still same result I'm running RHEL5 with SE-linux disabled. Could it be, that some other things should be activated to enable core dumps ? [root@khk9dsg5 tmp]# [root@khk9dsg5 tmp]# /etc/init.d/syslog-ng restart Stopping syslog-ng: [ OK ] Starting syslog-ng: [ OK ] /tmp [root@khk9dsg5 tmp]# [root@khk9dsg5 tmp]# ps -ef | grep syslog-ng root 2810 1 0 17:25 ? 00:00:00 /sbin/syslog-ng -p /var/run/syslogd.pid root 2854 2759 0 17:26 pts/1 00:00:00 grep syslog-ng root 2880 2873 0 Feb03 ? 00:00:00 /bin/sh -c /var/www/html/syslog/scripts/syslog2mysql.sh >> /var/log/php-syslog-ng/mysql.log 2>&1 [root@khk9dsg5 tmp]# kill -ABRT 2810 [root@khk9dsg5 tmp]# [root@khk9dsg5 tmp]# ps -ef | grep syslog-ng root 2870 2759 0 17:27 pts/1 00:00:00 grep syslog-ng root 2880 2873 0 Feb03 ? 00:00:00 /bin/sh -c /var/www/html/syslog/scripts/syslog2mysql.sh >> /var/log/php-syslog-ng/mysql.log 2>&1 [root@khk9dsg5 tmp]# ls -la total 52 drwxrwxrwt 9 root root 4096 Feb 20 17:25 . drwxr-xr-x 24 root root 4096 Feb 3 09:13 .. drwxrwxrwt 2 root root 4096 Feb 3 09:13 .font-unix -rw------- 1 root root 129 Feb 20 10:36 .gdm78VZ5T srw-rw-rw- 1 root root 0 Feb 3 09:13 .gdm_socket drwxrwxrwt 2 root root 4096 Feb 3 10:36 .ICE-unix drwx------ 2 root root 4096 Feb 3 10:36 keyring-uLO3tS srwxr-xr-x 1 root root 0 Feb 3 10:36 mapping-root drwx------ 2 root root 4096 Feb 3 11:13 orbit-root drwx------ 2 rips rips 4096 Feb 20 07:57 ssh-rGpIU26042 drwx------ 2 root root 4096 Feb 3 10:36 ssh-vuDwsR4065 -r--r--r-- 1 root root 11 Feb 3 09:13 .X0-lock drwxrwxrwt 2 root root 4096 Feb 3 09:13 .X11-unix [root@khk9dsg5 tmp]# rgds, Peter -----Oprindelig meddelelse----- Fra: syslog-ng-bounces@lists.balabit.hu [mailto:syslog-ng-bounces@lists.balabit.hu] På vegne af Balazs Scheidler Sendt: 20. februar 2008 16:54 Til: Syslog-ng users' and developers' mailing list Emne: Re: [syslog-ng] Antw: Re: Syslog-ng sometime dies at 04:02 On Wed, 2008-02-20 at 14:49 +0100, Peter Michael Calum wrote:
Hi
echo `pwd` in the start script only shows / and there's no core file
Maybe it's prevented by AppArmor or similar tools. Try changing the current directory to /var/tmp or /tmp. -- Bazsi _______________________________________________ syslog-ng maillist - syslog-ng@lists.balabit.hu https://lists.balabit.hu/mailman/listinfo/syslog-ng Frequently asked questions at http://www.campin.net/syslog-ng/faq.html