Hi,
I'm using  syslog-ng 1.9.9
 
In syslog-ng.conf,  I have specified a program to process the syslog-ng output.
 
 destination df_mail { file("/var/log/mail.log"); program("/home/readlog/readlog.php"); };

When cron performs it's logrotation daily, it runs a reload of the syslog-ng system. The readlog.php
script ends up being <defunct>.

For example:

root@thehost:/etc/logrotate.d# ps -ef | grep read
root         9     1  0 Mar27 ?        00:00:00 [kthread]
root      1652   537  0 Apr20 ?        00:00:00 [readlog.php] <defunct>
root      4000   537  0 Apr21 ?        00:00:00 [ readlog.php] <defunct>
root      7189   537  0 Apr22 ?        00:00:00 [readlog.php] <defunct>
 
 
Thanks for any suggestions.
D