Ok, if I figure this out I'll make sure I post it to the group. I'm glad at least that this problem isn't me doing something stupid. Thanks Rob Rob Glasser -----Original Message----- From: Nate Campi [mailto:nate@campin.net] Sent: Thursday, June 12, 2003 7:27 PM To: syslog-ng@lists.balabit.hu Subject: Re: [syslog-ng]Stats stop logging? - Fixed, but noticed another problem On Thu, Jun 12, 2003 at 04:16:10PM -0700, Glasser, Rob wrote:

I have no idea how to clear this so it won't show it everything I restart syslog-ng. Any ideas on the cause of this problem? Some

buffer

somewhere is storing this information and I'm not sure where.

Dude Rob, if you figure this out you've attained my personal holy grail. I spent a lot of time asking on sunmanager's, reading books at home and bookstores, and asking everyone I know. Here's what I do know: I read about it in a book once how there's a kernel ring buffer used to store kernel messages, and reading from the syslog door will re-read this buffer. I remembered reading a way to turn that off, but I never found that book again. I've had swatch alarms triggered many times because of this replay issue. Please let me know if you solve it. -- Nate Campi http://www.campin.net _______________________________________________ syslog-ng maillist - syslog-ng@lists.balabit.hu https://lists.balabit.hu/mailman/listinfo/syslog-ng Frequently asked questions at http://www.campin.net/syslog-ng/faq.html