[syslog-ng]Over zealous syslog-ng problem

Balazs Scheidler bazsi@balabit.hu
Fri, 3 Jan 2003 17:51:43 +0100


On Fri, Jan 03, 2003 at 04:02:38PM +0100, Andreas Schulze wrote:
> Balazs Scheidler wrote:
> >On Thu, Jan 02, 2003 at 06:36:32PM +0100, Andreas Schulze wrote:
> >
> >syslog-ng polls, which means that it waits until the pipe is writable, 
> >which
> >is not when the buffer is full.
> 
> Yepp. Imagine the following worst case scenario:
> There isn't any process that reads from the pipe.
> In this case you need in theory a unlimited queue size
> to buffer all the informations, that would never read...

Ok, I see we talked about different things. pipes as implemented by the core
OS is not lossy.

syslog-ng itself drops messages when the consumer of messages cannot accept
messages fast enough.

So it is not an OS issue, but a syslog-ng issue.

-- 
Bazsi
PGP info: KeyID 9AF8D0A9 Fingerprint CD27 CFB0 802C 0944 9CFD 804E C82C 8EB1