[syslog-ng] Delay writing to files

Paolo Supino vrkid at yahoo.com
Tue Dec 27 15:24:38 CET 2005


Hi 

  I went to acheck what is the situation in the firewall log file and
here is what I found: 
Dec 27 16:22:27 fwmgmt/fwmgmt logger: 10:00:19 drop ....

The date on fwmgmt is set correctly and shows the current time. 



TIA 
Paolo 


PS - I will try to remove the firewall logging and see if it will make
a difference. 






--- Balazs Scheidler <bazsi at balabit.hu> wrote:

> On Mon, 2005-12-26 at 03:14 -0800, Paolo Supino wrote:
> > Hi 
> > 
> >   Here is an update on the interval in writing to the log file: 
> > the output of ls -l on the file: 
> > -rw-r--r--  1 root root 6234 Dec 26 08:03 switch-01.log
> > and the last messsege coming in on the NIC (captured by tcpdump): 
> > 12:56:57.564348 IP switch-01.1024 > syslog.hot.net.il.syslog: UDP,
> > length 75
> >  As you can see the time interval is almost 5 hours... :-( 
> > 
> 
> I can't see how this could happen, log_fifo_size only specifies the
> maximum size of the buffer and does not increase write latency on its
> own.
> 
> Does the message arrive to the destination at the end? Because if it
> is
> not then probably it is an unrelated issue. The only thing that
> affects
> write latency is sync()
> 
> -- 
> Bazsi
> 
> _______________________________________________
> syslog-ng maillist  -  syslog-ng at lists.balabit.hu
> https://lists.balabit.hu/mailman/listinfo/syslog-ng
> Frequently asked questions at
> http://www.campin.net/syslog-ng/faq.html
> 
> 



		
__________________________________________ 
Yahoo! DSL – Something to write home about. 
Just $16.99/mo. or less. 
dsl.yahoo.com 



More information about the syslog-ng mailing list