It seems the only difference between file() and pipe() is the way files are opened. file() open files in read only , while pipe() open them in read-write. There's also defined a source and a destination fifo() that is just another name for pipe(). Amodiovalerio [Hypo] Verde ---------- Initial Header ----------- From : syslog-ng-admin@lists.balabit.hu To : syslog-ng@lists.balabit.hu Cc : Date : Sun, 29 Feb 2004 12:11:34 +1100 Subject : [syslog-ng]file() versus pipe() for kernel logging

I was just wondering if anyone could explain the differences between pip() and file() when used as kernel log sources.

For example the documentation suggests you would use the following statement to collect kernel logs:

source s_file { file("/proc/kmsg"); };

Most examples of syslog-ng.conf files I have seen have the following statement:

source s_pipe { pipe("/proc/kmsg"); };

Is there any difference between the two? Is one better than the other?

Any help much appreciated.

Thanks

James Turnbull

_______________________________________________ syslog-ng maillist - syslog-ng@lists.balabit.hu https://lists.balabit.hu/mailman/listinfo/syslog-ng Frequently asked questions at http://www.campin.net/syslog-ng/faq.html