Thank you. I downloaded the 20050628 snapshot and the file permission problem goes away. I also collected some more information on the second problem I reported. First, the relevant portions of my config file: ---syslog-ng.conf--- options { time_reopen (10); log_fifo_size (1000); long_hostnames (off); use_dns (no); use_fqdn (no); create_dirs (yes); dir_perm (0755); perm(0644); chain_hostnames(yes); keep_hostname (no); use_time_recvd(yes); time_reap(1); }; source remote { udp(ip(0.0.0.0) port(514)); tcp(ip(0.0.0.0) port(514)); }; destination d_ios { file("/var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-$MONTH$DAY$HOUR$MIN"); }; filter f_ios { match(%) and not match(PIX); }; filter f_only_printable_chars { match(^[[:print:]]*$); }; log { source(remote); filter(f_only_printable_chars); filter(f_ios); destination(d_ios); }; ---end syslog-ng.conf--- Now the symptoms. I have an application that continuously monitors the /var/nsm/inbox/router/cisco/ios/12.0/syslog directory and when a file is released in that directory, the application copies it to its working directory and removes it from the original directory. The following shows the files in the directory when using syslog-ng 1.6.5 and then the same is repeated for syslog-ng 1.9.4+20050628. I have also noticed that while version 1.6.5 was producing a single file in a directory per minute (and the time stamp corresponded to current time), version 1.9.4 produces a number of files and the timestamp varies (probably depends on the timestamp received). [root@simda02 NSM]# ./syslog-ng.orig -V syslog-ng 1.6.5 [root@simda02 NSM]# ./syslog-ng.orig -f /etc/syslog-ng/syslog-ng.conf [root@simda02 NSM]# ps -ef|grep syslog root 1597 1 0 15:30 ? 00:00:00 ./syslog-ng.orig -f /etc/syslog-ng/syslog-ng.conf root 1599 1508 0 15:30 pts/2 00:00:00 grep syslog [root@simda02 NSM]# echo;date;lsof +d /var/nsm/inbox/router/cisco/ios/12.0/syslog Tue Jun 28 15:31:57 GMT 2005 COMMAND PID USER FD TYPE DEVICE SIZE NODE NAME syslog-ng 1597 root 15w REG 8,8 141584 5216291 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06281531 [root@simda02 NSM]# echo;date;lsof +d /var/nsm/inbox/router/cisco/ios/12.0/syslog Tue Jun 28 15:32:10 GMT 2005 COMMAND PID USER FD TYPE DEVICE SIZE NODE NAME syslog-ng 1597 root 15w REG 8,8 24612 5216290 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06281532 [root@simda02 NSM]# echo;date;lsof +d /var/nsm/inbox/router/cisco/ios/12.0/syslog Tue Jun 28 15:32:21 GMT 2005 COMMAND PID USER FD TYPE DEVICE SIZE NODE NAME syslog-ng 1597 root 11w REG 8,8 5862 5216290 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06281532 [root@simda02 NSM]# echo;date;lsof +d /var/nsm/inbox/router/cisco/ios/12.0/syslog Tue Jun 28 15:32:35 GMT 2005 COMMAND PID USER FD TYPE DEVICE SIZE NODE NAME syslog-ng 1597 root 15w REG 8,8 26855 5216290 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06281532 [root@simda02 NSM]# echo;date;lsof +d /var/nsm/inbox/router/cisco/ios/12.0/syslog Tue Jun 28 15:32:49 GMT 2005 COMMAND PID USER FD TYPE DEVICE SIZE NODE NAME syslog-ng 1597 root 11w REG 8,8 56055 5216290 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06281532 [root@simda02 NSM]# echo;date;lsof +d /var/nsm/inbox/router/cisco/ios/12.0/syslog Tue Jun 28 15:32:59 GMT 2005 COMMAND PID USER FD TYPE DEVICE SIZE NODE NAME syslog-ng 1597 root 15w REG 8,8 73955 5216290 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06281532 [root@simda02 NSM]# echo;date;lsof +d /var/nsm/inbox/router/cisco/ios/12.0/syslog Tue Jun 28 15:33:02 GMT 2005 COMMAND PID USER FD TYPE DEVICE SIZE NODE NAME syslog-ng 1597 root 11w REG 8,8 3529 5216291 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06281533 [root@simda02 NSM]# kill -9 1597 [root@simda02 NSM]# ps -ef|grep syslog root 1622 1508 0 15:33 pts/2 00:00:00 grep syslog [root@simda02 NSM]# echo;date;lsof +d /var/nsm/inbox/router/cisco/ios/12.0/syslog Tue Jun 28 15:33:21 GMT 2005 [root@simda02 NSM]# *** Problems start here *** [root@simda02 NSM]# ./syslog-ng -V syslog-ng 1.9.4 [root@simda02 NSM]# ./syslog-ng -f /etc/syslog-ng/syslog-ng.conf [root@simda02 NSM]# ps -ef|grep syslog root 1651 1 0 15:36 ? 00:00:00 ./syslog-ng -f /etc/syslog-ng/syslog-ng.conf root 1653 1508 0 15:36 pts/2 00:00:00 grep syslog [root@simda02 NSM]# echo;date;lsof +d /var/nsm/inbox/router/cisco/ios/12.0/syslog Tue Jun 28 15:36:50 GMT 2005 [root@simda02 NSM]# echo;date;lsof +d /var/nsm/inbox/router/cisco/ios/12.0/syslog Tue Jun 28 15:36:58 GMT 2005 [root@simda02 NSM]# echo;date;lsof +d /var/nsm/inbox/router/cisco/ios/12.0/syslog Tue Jun 28 15:37:09 GMT 2005 [root@simda02 NSM]# echo;date;lsof +d /var/nsm/inbox/router/cisco/ios/12.0/syslog Tue Jun 28 15:37:20 GMT 2005 [root@simda02 NSM]# echo;date;lsof +d /var/nsm/inbox/router/cisco/ios/12.0/syslog Tue Jun 28 15:37:30 GMT 2005 COMMAND PID USER FD TYPE DEVICE SIZE NODE NAME syslog-ng 1651 root 11w REG 8,8 21143 5216290 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06280940 syslog-ng 1651 root 12w REG 8,8 28571 5216291 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06280941 syslog-ng 1651 root 14w REG 8,8 21143 5216290 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06280940 syslog-ng 1651 root 15w REG 8,8 28571 5216291 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06280941 syslog-ng 1651 root 17w REG 8,8 21143 5216290 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06280940 syslog-ng 1651 root 19w REG 8,8 873 5216292 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06281140 syslog-ng 1651 root 20w REG 8,8 1496 5216293 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06281141 [root@simda02 NSM]# echo;date;lsof +d /var/nsm/inbox/router/cisco/ios/12.0/syslog Tue Jun 28 15:37:43 GMT 2005 COMMAND PID USER FD TYPE DEVICE SIZE NODE NAME syslog-ng 1651 root 11w REG 8,8 22015 5216290 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06280940 syslog-ng 1651 root 12w REG 8,8 55008 5216291 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06280941 syslog-ng 1651 root 14w REG 8,8 22015 5216290 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06280940 syslog-ng 1651 root 15w REG 8,8 55008 5216291 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06280941 syslog-ng 1651 root 17w REG 8,8 22015 5216290 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06280940 syslog-ng 1651 root 19w REG 8,8 873 5216292 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06281140 syslog-ng 1651 root 20w REG 8,8 1909 5216293 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06281141 syslog-ng 1651 root 22w REG 8,8 1175 5216294 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06280840 syslog-ng 1651 root 23w REG 8,8 1945 5216295 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06280841 syslog-ng 1651 root 24w REG 8,8 512 5216296 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06281537 syslog-ng 1651 root 25w REG 8,8 1909 5216293 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06281141 syslog-ng 1651 root 27w REG 8,8 22015 5216290 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06280940 syslog-ng 1651 root 28w REG 8,8 1945 5216295 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06280841 syslog-ng 1651 root 29w REG 8,8 1909 5216293 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06281141 [root@simda02 NSM]# echo;date;lsof +d /var/nsm/inbox/router/cisco/ios/12.0/syslog Tue Jun 28 15:38:01 GMT 2005 COMMAND PID USER FD TYPE DEVICE SIZE NODE NAME syslog-ng 1651 root 11w REG 8,8 22015 5216290 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06280940 syslog-ng 1651 root 12w REG 8,8 57356 5216291 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06280941 syslog-ng 1651 root 14w REG 8,8 22015 5216290 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06280940 syslog-ng 1651 root 15w REG 8,8 57356 5216291 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06280941 syslog-ng 1651 root 17w REG 8,8 22015 5216290 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06280940 syslog-ng 1651 root 19w REG 8,8 873 5216292 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06281140 syslog-ng 1651 root 20w REG 8,8 1909 5216293 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06281141 syslog-ng 1651 root 22w REG 8,8 1175 5216294 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06280840 syslog-ng 1651 root 23w REG 8,8 2337 5216295 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06280841 syslog-ng 1651 root 24w REG 8,8 512 5216296 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06281537 syslog-ng 1651 root 25w REG 8,8 1909 5216293 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06281141 syslog-ng 1651 root 27w REG 8,8 22015 5216290 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06280940 syslog-ng 1651 root 28w REG 8,8 2337 5216295 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06280841 syslog-ng 1651 root 29w REG 8,8 1909 5216293 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06281141 syslog-ng 1651 root 30w REG 8,8 57356 5216291 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06280941 syslog-ng 1651 root 31w REG 8,8 57356 5216291 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06280941 syslog-ng 1651 root 32w REG 8,8 2337 5216295 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06280841 syslog-ng 1651 root 33w REG 8,8 35554 5216297 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06280942 syslog-ng 1651 root 34w REG 8,8 35554 5216297 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06280942 syslog-ng 1651 root 35w REG 8,8 35554 5216297 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06280942 syslog-ng 1651 root 36w REG 8,8 544 5216298 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06281142 syslog-ng 1651 root 37w REG 8,8 490 5216299 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06280842 syslog-ng 1651 root 38w REG 8,8 490 5216299 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06280842 syslog-ng 1651 root 39w REG 8,8 490 5216299 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06280842 syslog-ng 1651 root 40w REG 8,8 544 5216298 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06281142 [root@simda02 NSM]# echo;date;lsof +d /var/nsm/inbox/router/cisco/ios/12.0/syslog Tue Jun 28 15:38:30 GMT 2005 COMMAND PID USER FD TYPE DEVICE SIZE NODE NAME syslog-ng 1651 root 11w REG 8,8 22015 5216290 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06280940 syslog-ng 1651 root 12w REG 8,8 57356 5216291 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06280941 syslog-ng 1651 root 14w REG 8,8 22015 5216290 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06280940 syslog-ng 1651 root 15w REG 8,8 57356 5216291 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06280941 syslog-ng 1651 root 17w REG 8,8 22015 5216290 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06280940 syslog-ng 1651 root 19w REG 8,8 873 5216292 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06281140 syslog-ng 1651 root 20w REG 8,8 1909 5216293 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06281141 syslog-ng 1651 root 22w REG 8,8 1175 5216294 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06280840 syslog-ng 1651 root 23w REG 8,8 2337 5216295 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06280841 syslog-ng 1651 root 24w REG 8,8 512 5216296 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06281537 syslog-ng 1651 root 25w REG 8,8 1909 5216293 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06281141 syslog-ng 1651 root 27w REG 8,8 22015 5216290 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06280940 syslog-ng 1651 root 28w REG 8,8 2337 5216295 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06280841 syslog-ng 1651 root 29w REG 8,8 1909 5216293 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06281141 syslog-ng 1651 root 30w REG 8,8 57356 5216291 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06280941 syslog-ng 1651 root 31w REG 8,8 57356 5216291 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06280941 syslog-ng 1651 root 32w REG 8,8 2337 5216295 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06280841 syslog-ng 1651 root 33w REG 8,8 92808 5216297 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06280942 syslog-ng 1651 root 34w REG 8,8 92808 5216297 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06280942 syslog-ng 1651 root 35w REG 8,8 92808 5216297 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06280942 syslog-ng 1651 root 36w REG 8,8 1958 5216298 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06281142 syslog-ng 1651 root 37w REG 8,8 882 5216299 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06280842 syslog-ng 1651 root 38w REG 8,8 882 5216299 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06280842 syslog-ng 1651 root 39w REG 8,8 882 5216299 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06280842 syslog-ng 1651 root 40w REG 8,8 1958 5216298 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06281142 syslog-ng 1651 root 41w REG 8,8 1958 5216298 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06281142 syslog-ng 1651 root 42w REG 8,8 1958 5216298 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06281142 syslog-ng 1651 root 43w REG 8,8 1958 5216298 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06281142 syslog-ng 1651 root 44w REG 8,8 1958 5216298 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06281142 syslog-ng 1651 root 45w REG 8,8 1958 5216298 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06281142 syslog-ng 1651 root 46w REG 8,8 92808 5216297 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06280942 syslog-ng 1651 root 47w REG 8,8 1958 5216298 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06281142 syslog-ng 1651 root 48w REG 8,8 92808 5216297 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06280942 syslog-ng 1651 root 49w REG 8,8 92808 5216297 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06280942 syslog-ng 1651 root 50w REG 8,8 1958 5216298 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06281142 syslog-ng 1651 root 51w REG 8,8 92808 5216297 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06280942 syslog-ng 1651 root 52w REG 8,8 882 5216299 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06280842 syslog-ng 1651 root 53w REG 8,8 92808 5216297 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06280942 syslog-ng 1651 root 54w REG 8,8 92808 5216297 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06280942 syslog-ng 1651 root 55w REG 8,8 92808 5216297 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06280942 syslog-ng 1651 root 56w REG 8,8 92808 5216297 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06280942 syslog-ng 1651 root 57w REG 8,8 92808 5216297 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06280942 syslog-ng 1651 root 58w REG 8,8 882 5216299 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06280842 syslog-ng 1651 root 59w REG 8,8 1958 5216298 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06281142 syslog-ng 1651 root 60w REG 8,8 92808 5216297 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06280942 [root@simda02 NSM]# echo;date;lsof +d /var/nsm/inbox/router/cisco/ios/12.0/syslog Tue Jun 28 15:39:01 GMT 2005 COMMAND PID USER FD TYPE DEVICE SIZE NODE NAME syslog-ng 1651 root 11w REG 8,8 22015 5216290 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06280940 syslog-ng 1651 root 12w REG 8,8 57356 5216291 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06280941 syslog-ng 1651 root 14w REG 8,8 22015 5216290 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06280940 syslog-ng 1651 root 15w REG 8,8 57356 5216291 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06280941 syslog-ng 1651 root 17w REG 8,8 22015 5216290 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06280940 syslog-ng 1651 root 19w REG 8,8 873 5216292 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06281140 syslog-ng 1651 root 20w REG 8,8 1909 5216293 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06281141 syslog-ng 1651 root 22w REG 8,8 1175 5216294 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06280840 syslog-ng 1651 root 23w REG 8,8 2337 5216295 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06280841 syslog-ng 1651 root 24w REG 8,8 512 5216296 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06281537 syslog-ng 1651 root 25w REG 8,8 1909 5216293 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06281141 syslog-ng 1651 root 27w REG 8,8 22015 5216290 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06280940 syslog-ng 1651 root 28w REG 8,8 2337 5216295 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06280841 syslog-ng 1651 root 29w REG 8,8 1909 5216293 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06281141 syslog-ng 1651 root 30w REG 8,8 57356 5216291 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06280941 syslog-ng 1651 root 31w REG 8,8 57356 5216291 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06280941 syslog-ng 1651 root 32w REG 8,8 2337 5216295 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06280841 syslog-ng 1651 root 33w REG 8,8 129975 5216297 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06280942 syslog-ng 1651 root 34w REG 8,8 129975 5216297 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06280942 syslog-ng 1651 root 35w REG 8,8 129975 5216297 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06280942 syslog-ng 1651 root 36w REG 8,8 3347 5216298 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06281142 syslog-ng 1651 root 37w REG 8,8 1467 5216299 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06280842 syslog-ng 1651 root 38w REG 8,8 1467 5216299 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06280842 syslog-ng 1651 root 39w REG 8,8 1467 5216299 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06280842 syslog-ng 1651 root 40w REG 8,8 3347 5216298 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06281142 syslog-ng 1651 root 41w REG 8,8 3347 5216298 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06281142 syslog-ng 1651 root 42w REG 8,8 3347 5216298 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06281142 syslog-ng 1651 root 43w REG 8,8 3347 5216298 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06281142 syslog-ng 1651 root 44w REG 8,8 3347 5216298 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06281142 syslog-ng 1651 root 45w REG 8,8 3347 5216298 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06281142 syslog-ng 1651 root 46w REG 8,8 129975 5216297 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06280942 syslog-ng 1651 root 47w REG 8,8 3347 5216298 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06281142 syslog-ng 1651 root 48w REG 8,8 129975 5216297 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06280942 syslog-ng 1651 root 49w REG 8,8 129975 5216297 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06280942 syslog-ng 1651 root 50w REG 8,8 3347 5216298 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06281142 syslog-ng 1651 root 51w REG 8,8 129975 5216297 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06280942 syslog-ng 1651 root 52w REG 8,8 1467 5216299 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06280842 syslog-ng 1651 root 53w REG 8,8 129975 5216297 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06280942 syslog-ng 1651 root 54w REG 8,8 129975 5216297 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06280942 syslog-ng 1651 root 55w REG 8,8 129975 5216297 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06280942 syslog-ng 1651 root 56w REG 8,8 129975 5216297 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06280942 syslog-ng 1651 root 57w REG 8,8 129975 5216297 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06280942 syslog-ng 1651 root 58w REG 8,8 1467 5216299 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06280842 syslog-ng 1651 root 59w REG 8,8 3347 5216298 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06281142 syslog-ng 1651 root 60w REG 8,8 129975 5216297 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06280942 syslog-ng 1651 root 61w REG 8,8 1467 5216299 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06280842 syslog-ng 1651 root 62w REG 8,8 1467 5216299 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06280842 syslog-ng 1651 root 63w REG 8,8 3347 5216298 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06281142 syslog-ng 1651 root 64w REG 8,8 3347 5216298 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06281142 syslog-ng 1651 root 65w REG 8,8 1467 5216299 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06280842 syslog-ng 1651 root 66w REG 8,8 3347 5216298 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06281142 syslog-ng 1651 root 67w REG 8,8 3347 5216298 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06281142 syslog-ng 1651 root 68w REG 8,8 129975 5216297 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06280942 syslog-ng 1651 root 69w REG 8,8 129975 5216297 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06280942 syslog-ng 1651 root 70w REG 8,8 3347 5216298 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06281142 syslog-ng 1651 root 71w REG 8,8 3347 5216298 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06281142 syslog-ng 1651 root 72w REG 8,8 35436 5216300 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06280943 syslog-ng 1651 root 73w REG 8,8 35436 5216300 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06280943 syslog-ng 1651 root 74w REG 8,8 129975 5216297 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06280942 syslog-ng 1651 root 75w REG 8,8 840 5216301 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06281143 syslog-ng 1651 root 76w REG 8,8 840 5216301 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06281143 syslog-ng 1651 root 77w REG 8,8 489 5216302 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06280843 syslog-ng 1651 root 78w REG 8,8 35436 5216300 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06280943 syslog-ng 1651 root 79w REG 8,8 840 5216301 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06281143 syslog-ng 1651 root 80w REG 8,8 840 5216301 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06281143 syslog-ng 1651 root 81w REG 8,8 35436 5216300 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06280943 syslog-ng 1651 root 82w REG 8,8 489 5216302 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06280843 syslog-ng 1651 root 83w REG 8,8 489 5216302 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06280843 [root@simda02 NSM]# ps -ef|grep syslog root 1651 1 0 15:36 ? 00:00:01 ./syslog-ng -f /etc/syslog-ng/syslog-ng.conf root 1682 1508 0 15:39 pts/2 00:00:00 grep syslog [root@simda02 NSM]# kill -9 1651 [root@simda02 NSM]# echo;date;lsof +d /var/nsm/inbox/router/cisco/ios/12.0/syslog Tue Jun 28 15:39:21 GMT 2005 [root@simda02 NSM]# -----Original Message----- From: syslog-ng-bounces@lists.balabit.hu [mailto:syslog-ng-bounces@lists.balabit.hu] On Behalf Of Balazs Scheidler Sent: Monday, June 27, 2005 3:33 AM To: Syslog-ng users' and developers' mailing list Subject: RE: [syslog-ng] Error parsing conf file? On Fri, 2005-06-24 at 09:15 -0600, Zb Indelak wrote:

Thank you for such a quick turn-around on this issue. I've run into a couple more.

1) New files are being created with file permissions equal to the inverse of umask, entirely ignoring the permissions specified in the perm() option. Hardcoding the permissions in the open() call in affile.c fixes the problem (yes, I know it's not the way to do it, but I was in a hurry). In other words, it appears that the value of mode is all ones rather than whatever was specified in the perm() option.

this one is fixed, committed, the next snapshot should contain the fix.

2) Syslog-ng does not appear to be closing the log files and maintains a lock on the files until the application exits. This one is causing me no end of grief.

I don't really know what you mean here? syslog-ng does not lock files on its own and according to my tests dynamic output files were properly reaped (closed in time as time_reap() specifies) non-dynamic files (which has no macros in the name) are not reaped, but IIRC syslog-ng 1.6.x did not reap those either. -- Bazsi _______________________________________________ syslog-ng maillist - syslog-ng@lists.balabit.hu https://lists.balabit.hu/mailman/listinfo/syslog-ng Frequently asked questions at http://www.campin.net/syslog-ng/faq.html