[syslog-ng]Syslog Logging Delay
Balazs Scheidler
bazsi@balabit.hu
Thu, 5 Apr 2001 17:55:50 +0200
On Thu, Apr 05, 2001 at 11:31:19AM -0400, Brian E. Seppanen wrote:
> >
> > You may try to use klogd, and use that to direct kernel logs to syslog-ng.
>
> There's no way for me to say this without sounding like a complete idiot,
> but I thought klogd needed to be running to direct messages to
> /proc/kmesg, which syslog-ng would then read? If this isn't the case then
> for all I know I've been creating contention for that file by having both
> syslog-ng reading from it as well as having klogd running. There may be
> no trouble with syslog-ng other than my ignorance. I've stopped klogd
> and I'll see if I still get kernel messages, thankfully it won't take
> long as we usually see a bad ICMP packet or two during the day which the
> kernel logs.
Ops, that may cause a race condition. Both klogd and syslog-ng tries to read
kmsg, and if klogd wins, syslog-ng stays blocked. I don't know why the fd is
not in non-blocking mode though.
--
Bazsi
PGP info: KeyID 9AF8D0A9 Fingerprint CD27 CFB0 802C 0944 9CFD 804E C82C 8EB1