[syslog-ng]source socket keepalive patch suggestion

Ted_Rule@flextech.co.uk Ted_Rule@flextech.co.uk
Thu, 12 Sep 2002 09:16:28 +0100

This problem exist for me on all glibc incarnations as far as I'm aware.

It also exists in Perl5 / Syslog:pm - but I wrote a local patch for myself for

Admittedly, I probably could write a patch to glibc, but then I'd have to get it
into the real glibc
source so that it doesn't get overwritten by every new glibc RPM release.

I just thought it would be easier all round to provide for as near 'non-stop'
functionality across syslog-ng/SIGHUP
as possible.


"Ed Ravin" <eravin@panix.com> on 11/09/2002 18:34:42

Please respond to syslog-ng@lists.balabit.hu

To:   syslog-ng@lists.balabit.hu
cc:    (bcc: Ted Rule/160GPS/Flextech/UK)

Subject:  Re: [syslog-ng]source socket keepalive patch suggestion

Ted_Rule@flextech.co.uk writes:
> I previously enquired whether it would be possible to allow for a keep-alive
> option
> on Unix DGRAM sockets to help avoid the situation on some platforms when
> such as sendmail have the /dev/log socket 'whipped from under them' during
> syslog-ng/SIGHUP.

Why not fix the libc code on those platforms so it does basic sanity
checking on the socket, and re-opens the socket when it discovers that
its cached filehandle for /dev/log is invalid?  I encountered this on
NetBSD and it was an easy library fix (it's patched in all current
releases (1.5.3 and 1.6 candidates) - what OS are you using?

syslog-ng maillist  -  syslog-ng@lists.balabit.hu
Frequently asked questions at http://www.campin.net/syslog-ng/faq.html


This E-mail message, including any attachments, is intended only for the person
or entity to which it is addressed, and may contain confidential information.

If you are not the intended recipient, any review, retransmission, disclosure,
copying, modification or other use of this E-mail message or attachments is
strictly forbidden.

If you have received this E-mail message in error, please contact the author and
delete the message and any attachments from your computer.

You are also advised that the views and opinions expressed in this E-mail
message and any attachments are the author's own, and may not reflect the views
and opinions of FLEXTECH Television Limited.