[syslog-ng] Error parsing conf file?
Zb Indelak
zb.indelak at telus.com
Tue Jun 28 17:46:52 CEST 2005
Thank you. I downloaded the 20050628 snapshot and the file permission problem goes away. I also collected some more information on the second problem I reported.
First, the relevant portions of my config file:
---syslog-ng.conf---
options {
time_reopen (10);
log_fifo_size (1000);
long_hostnames (off);
use_dns (no);
use_fqdn (no);
create_dirs (yes);
dir_perm (0755);
perm(0644);
chain_hostnames(yes);
keep_hostname (no);
use_time_recvd(yes);
time_reap(1);
};
source remote {
udp(ip(0.0.0.0) port(514));
tcp(ip(0.0.0.0) port(514));
};
destination d_ios { file("/var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-$MONTH$DAY$HOUR$MIN"); };
filter f_ios { match(%) and not match(PIX); };
filter f_only_printable_chars { match(^[[:print:]]*$); };
log { source(remote); filter(f_only_printable_chars); filter(f_ios); destination(d_ios); };
---end syslog-ng.conf---
Now the symptoms. I have an application that continuously monitors the /var/nsm/inbox/router/cisco/ios/12.0/syslog directory and when a file is released in that directory, the application copies it to its working directory and removes it from the original directory. The following shows the files
in the directory when using syslog-ng 1.6.5 and then the same is repeated for syslog-ng 1.9.4+20050628. I have also noticed that while version 1.6.5 was producing a single file in a directory per minute (and the time stamp corresponded to current time), version 1.9.4 produces a number of files and
the timestamp varies (probably depends on the timestamp received).
[root at simda02 NSM]# ./syslog-ng.orig -V
syslog-ng 1.6.5
[root at simda02 NSM]# ./syslog-ng.orig -f /etc/syslog-ng/syslog-ng.conf
[root at simda02 NSM]# ps -ef|grep syslog
root 1597 1 0 15:30 ? 00:00:00 ./syslog-ng.orig -f /etc/syslog-ng/syslog-ng.conf
root 1599 1508 0 15:30 pts/2 00:00:00 grep syslog
[root at simda02 NSM]# echo;date;lsof +d /var/nsm/inbox/router/cisco/ios/12.0/syslog
Tue Jun 28 15:31:57 GMT 2005
COMMAND PID USER FD TYPE DEVICE SIZE NODE NAME
syslog-ng 1597 root 15w REG 8,8 141584 5216291 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06281531
[root at simda02 NSM]# echo;date;lsof +d /var/nsm/inbox/router/cisco/ios/12.0/syslog
Tue Jun 28 15:32:10 GMT 2005
COMMAND PID USER FD TYPE DEVICE SIZE NODE NAME
syslog-ng 1597 root 15w REG 8,8 24612 5216290 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06281532
[root at simda02 NSM]# echo;date;lsof +d /var/nsm/inbox/router/cisco/ios/12.0/syslog
Tue Jun 28 15:32:21 GMT 2005
COMMAND PID USER FD TYPE DEVICE SIZE NODE NAME
syslog-ng 1597 root 11w REG 8,8 5862 5216290 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06281532
[root at simda02 NSM]# echo;date;lsof +d /var/nsm/inbox/router/cisco/ios/12.0/syslog
Tue Jun 28 15:32:35 GMT 2005
COMMAND PID USER FD TYPE DEVICE SIZE NODE NAME
syslog-ng 1597 root 15w REG 8,8 26855 5216290 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06281532
[root at simda02 NSM]# echo;date;lsof +d /var/nsm/inbox/router/cisco/ios/12.0/syslog
Tue Jun 28 15:32:49 GMT 2005
COMMAND PID USER FD TYPE DEVICE SIZE NODE NAME
syslog-ng 1597 root 11w REG 8,8 56055 5216290 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06281532
[root at simda02 NSM]# echo;date;lsof +d /var/nsm/inbox/router/cisco/ios/12.0/syslog
Tue Jun 28 15:32:59 GMT 2005
COMMAND PID USER FD TYPE DEVICE SIZE NODE NAME
syslog-ng 1597 root 15w REG 8,8 73955 5216290 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06281532
[root at simda02 NSM]# echo;date;lsof +d /var/nsm/inbox/router/cisco/ios/12.0/syslog
Tue Jun 28 15:33:02 GMT 2005
COMMAND PID USER FD TYPE DEVICE SIZE NODE NAME
syslog-ng 1597 root 11w REG 8,8 3529 5216291 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06281533
[root at simda02 NSM]# kill -9 1597
[root at simda02 NSM]# ps -ef|grep syslog
root 1622 1508 0 15:33 pts/2 00:00:00 grep syslog
[root at simda02 NSM]# echo;date;lsof +d /var/nsm/inbox/router/cisco/ios/12.0/syslog
Tue Jun 28 15:33:21 GMT 2005
[root at simda02 NSM]#
*** Problems start here ***
[root at simda02 NSM]# ./syslog-ng -V
syslog-ng 1.9.4
[root at simda02 NSM]# ./syslog-ng -f /etc/syslog-ng/syslog-ng.conf
[root at simda02 NSM]# ps -ef|grep syslog
root 1651 1 0 15:36 ? 00:00:00 ./syslog-ng -f /etc/syslog-ng/syslog-ng.conf
root 1653 1508 0 15:36 pts/2 00:00:00 grep syslog
[root at simda02 NSM]# echo;date;lsof +d /var/nsm/inbox/router/cisco/ios/12.0/syslog
Tue Jun 28 15:36:50 GMT 2005
[root at simda02 NSM]# echo;date;lsof +d /var/nsm/inbox/router/cisco/ios/12.0/syslog
Tue Jun 28 15:36:58 GMT 2005
[root at simda02 NSM]# echo;date;lsof +d /var/nsm/inbox/router/cisco/ios/12.0/syslog
Tue Jun 28 15:37:09 GMT 2005
[root at simda02 NSM]# echo;date;lsof +d /var/nsm/inbox/router/cisco/ios/12.0/syslog
Tue Jun 28 15:37:20 GMT 2005
[root at simda02 NSM]# echo;date;lsof +d /var/nsm/inbox/router/cisco/ios/12.0/syslog
Tue Jun 28 15:37:30 GMT 2005
COMMAND PID USER FD TYPE DEVICE SIZE NODE NAME
syslog-ng 1651 root 11w REG 8,8 21143 5216290 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06280940
syslog-ng 1651 root 12w REG 8,8 28571 5216291 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06280941
syslog-ng 1651 root 14w REG 8,8 21143 5216290 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06280940
syslog-ng 1651 root 15w REG 8,8 28571 5216291 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06280941
syslog-ng 1651 root 17w REG 8,8 21143 5216290 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06280940
syslog-ng 1651 root 19w REG 8,8 873 5216292 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06281140
syslog-ng 1651 root 20w REG 8,8 1496 5216293 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06281141
[root at simda02 NSM]# echo;date;lsof +d /var/nsm/inbox/router/cisco/ios/12.0/syslog
Tue Jun 28 15:37:43 GMT 2005
COMMAND PID USER FD TYPE DEVICE SIZE NODE NAME
syslog-ng 1651 root 11w REG 8,8 22015 5216290 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06280940
syslog-ng 1651 root 12w REG 8,8 55008 5216291 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06280941
syslog-ng 1651 root 14w REG 8,8 22015 5216290 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06280940
syslog-ng 1651 root 15w REG 8,8 55008 5216291 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06280941
syslog-ng 1651 root 17w REG 8,8 22015 5216290 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06280940
syslog-ng 1651 root 19w REG 8,8 873 5216292 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06281140
syslog-ng 1651 root 20w REG 8,8 1909 5216293 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06281141
syslog-ng 1651 root 22w REG 8,8 1175 5216294 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06280840
syslog-ng 1651 root 23w REG 8,8 1945 5216295 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06280841
syslog-ng 1651 root 24w REG 8,8 512 5216296 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06281537
syslog-ng 1651 root 25w REG 8,8 1909 5216293 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06281141
syslog-ng 1651 root 27w REG 8,8 22015 5216290 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06280940
syslog-ng 1651 root 28w REG 8,8 1945 5216295 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06280841
syslog-ng 1651 root 29w REG 8,8 1909 5216293 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06281141
[root at simda02 NSM]# echo;date;lsof +d /var/nsm/inbox/router/cisco/ios/12.0/syslog
Tue Jun 28 15:38:01 GMT 2005
COMMAND PID USER FD TYPE DEVICE SIZE NODE NAME
syslog-ng 1651 root 11w REG 8,8 22015 5216290 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06280940
syslog-ng 1651 root 12w REG 8,8 57356 5216291 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06280941
syslog-ng 1651 root 14w REG 8,8 22015 5216290 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06280940
syslog-ng 1651 root 15w REG 8,8 57356 5216291 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06280941
syslog-ng 1651 root 17w REG 8,8 22015 5216290 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06280940
syslog-ng 1651 root 19w REG 8,8 873 5216292 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06281140
syslog-ng 1651 root 20w REG 8,8 1909 5216293 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06281141
syslog-ng 1651 root 22w REG 8,8 1175 5216294 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06280840
syslog-ng 1651 root 23w REG 8,8 2337 5216295 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06280841
syslog-ng 1651 root 24w REG 8,8 512 5216296 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06281537
syslog-ng 1651 root 25w REG 8,8 1909 5216293 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06281141
syslog-ng 1651 root 27w REG 8,8 22015 5216290 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06280940
syslog-ng 1651 root 28w REG 8,8 2337 5216295 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06280841
syslog-ng 1651 root 29w REG 8,8 1909 5216293 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06281141
syslog-ng 1651 root 30w REG 8,8 57356 5216291 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06280941
syslog-ng 1651 root 31w REG 8,8 57356 5216291 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06280941
syslog-ng 1651 root 32w REG 8,8 2337 5216295 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06280841
syslog-ng 1651 root 33w REG 8,8 35554 5216297 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06280942
syslog-ng 1651 root 34w REG 8,8 35554 5216297 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06280942
syslog-ng 1651 root 35w REG 8,8 35554 5216297 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06280942
syslog-ng 1651 root 36w REG 8,8 544 5216298 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06281142
syslog-ng 1651 root 37w REG 8,8 490 5216299 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06280842
syslog-ng 1651 root 38w REG 8,8 490 5216299 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06280842
syslog-ng 1651 root 39w REG 8,8 490 5216299 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06280842
syslog-ng 1651 root 40w REG 8,8 544 5216298 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06281142
[root at simda02 NSM]# echo;date;lsof +d /var/nsm/inbox/router/cisco/ios/12.0/syslog
Tue Jun 28 15:38:30 GMT 2005
COMMAND PID USER FD TYPE DEVICE SIZE NODE NAME
syslog-ng 1651 root 11w REG 8,8 22015 5216290 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06280940
syslog-ng 1651 root 12w REG 8,8 57356 5216291 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06280941
syslog-ng 1651 root 14w REG 8,8 22015 5216290 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06280940
syslog-ng 1651 root 15w REG 8,8 57356 5216291 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06280941
syslog-ng 1651 root 17w REG 8,8 22015 5216290 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06280940
syslog-ng 1651 root 19w REG 8,8 873 5216292 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06281140
syslog-ng 1651 root 20w REG 8,8 1909 5216293 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06281141
syslog-ng 1651 root 22w REG 8,8 1175 5216294 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06280840
syslog-ng 1651 root 23w REG 8,8 2337 5216295 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06280841
syslog-ng 1651 root 24w REG 8,8 512 5216296 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06281537
syslog-ng 1651 root 25w REG 8,8 1909 5216293 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06281141
syslog-ng 1651 root 27w REG 8,8 22015 5216290 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06280940
syslog-ng 1651 root 28w REG 8,8 2337 5216295 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06280841
syslog-ng 1651 root 29w REG 8,8 1909 5216293 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06281141
syslog-ng 1651 root 30w REG 8,8 57356 5216291 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06280941
syslog-ng 1651 root 31w REG 8,8 57356 5216291 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06280941
syslog-ng 1651 root 32w REG 8,8 2337 5216295 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06280841
syslog-ng 1651 root 33w REG 8,8 92808 5216297 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06280942
syslog-ng 1651 root 34w REG 8,8 92808 5216297 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06280942
syslog-ng 1651 root 35w REG 8,8 92808 5216297 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06280942
syslog-ng 1651 root 36w REG 8,8 1958 5216298 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06281142
syslog-ng 1651 root 37w REG 8,8 882 5216299 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06280842
syslog-ng 1651 root 38w REG 8,8 882 5216299 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06280842
syslog-ng 1651 root 39w REG 8,8 882 5216299 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06280842
syslog-ng 1651 root 40w REG 8,8 1958 5216298 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06281142
syslog-ng 1651 root 41w REG 8,8 1958 5216298 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06281142
syslog-ng 1651 root 42w REG 8,8 1958 5216298 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06281142
syslog-ng 1651 root 43w REG 8,8 1958 5216298 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06281142
syslog-ng 1651 root 44w REG 8,8 1958 5216298 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06281142
syslog-ng 1651 root 45w REG 8,8 1958 5216298 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06281142
syslog-ng 1651 root 46w REG 8,8 92808 5216297 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06280942
syslog-ng 1651 root 47w REG 8,8 1958 5216298 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06281142
syslog-ng 1651 root 48w REG 8,8 92808 5216297 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06280942
syslog-ng 1651 root 49w REG 8,8 92808 5216297 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06280942
syslog-ng 1651 root 50w REG 8,8 1958 5216298 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06281142
syslog-ng 1651 root 51w REG 8,8 92808 5216297 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06280942
syslog-ng 1651 root 52w REG 8,8 882 5216299 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06280842
syslog-ng 1651 root 53w REG 8,8 92808 5216297 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06280942
syslog-ng 1651 root 54w REG 8,8 92808 5216297 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06280942
syslog-ng 1651 root 55w REG 8,8 92808 5216297 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06280942
syslog-ng 1651 root 56w REG 8,8 92808 5216297 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06280942
syslog-ng 1651 root 57w REG 8,8 92808 5216297 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06280942
syslog-ng 1651 root 58w REG 8,8 882 5216299 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06280842
syslog-ng 1651 root 59w REG 8,8 1958 5216298 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06281142
syslog-ng 1651 root 60w REG 8,8 92808 5216297 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06280942
[root at simda02 NSM]# echo;date;lsof +d /var/nsm/inbox/router/cisco/ios/12.0/syslog
Tue Jun 28 15:39:01 GMT 2005
COMMAND PID USER FD TYPE DEVICE SIZE NODE NAME
syslog-ng 1651 root 11w REG 8,8 22015 5216290 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06280940
syslog-ng 1651 root 12w REG 8,8 57356 5216291 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06280941
syslog-ng 1651 root 14w REG 8,8 22015 5216290 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06280940
syslog-ng 1651 root 15w REG 8,8 57356 5216291 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06280941
syslog-ng 1651 root 17w REG 8,8 22015 5216290 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06280940
syslog-ng 1651 root 19w REG 8,8 873 5216292 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06281140
syslog-ng 1651 root 20w REG 8,8 1909 5216293 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06281141
syslog-ng 1651 root 22w REG 8,8 1175 5216294 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06280840
syslog-ng 1651 root 23w REG 8,8 2337 5216295 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06280841
syslog-ng 1651 root 24w REG 8,8 512 5216296 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06281537
syslog-ng 1651 root 25w REG 8,8 1909 5216293 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06281141
syslog-ng 1651 root 27w REG 8,8 22015 5216290 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06280940
syslog-ng 1651 root 28w REG 8,8 2337 5216295 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06280841
syslog-ng 1651 root 29w REG 8,8 1909 5216293 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06281141
syslog-ng 1651 root 30w REG 8,8 57356 5216291 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06280941
syslog-ng 1651 root 31w REG 8,8 57356 5216291 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06280941
syslog-ng 1651 root 32w REG 8,8 2337 5216295 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06280841
syslog-ng 1651 root 33w REG 8,8 129975 5216297 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06280942
syslog-ng 1651 root 34w REG 8,8 129975 5216297 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06280942
syslog-ng 1651 root 35w REG 8,8 129975 5216297 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06280942
syslog-ng 1651 root 36w REG 8,8 3347 5216298 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06281142
syslog-ng 1651 root 37w REG 8,8 1467 5216299 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06280842
syslog-ng 1651 root 38w REG 8,8 1467 5216299 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06280842
syslog-ng 1651 root 39w REG 8,8 1467 5216299 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06280842
syslog-ng 1651 root 40w REG 8,8 3347 5216298 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06281142
syslog-ng 1651 root 41w REG 8,8 3347 5216298 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06281142
syslog-ng 1651 root 42w REG 8,8 3347 5216298 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06281142
syslog-ng 1651 root 43w REG 8,8 3347 5216298 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06281142
syslog-ng 1651 root 44w REG 8,8 3347 5216298 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06281142
syslog-ng 1651 root 45w REG 8,8 3347 5216298 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06281142
syslog-ng 1651 root 46w REG 8,8 129975 5216297 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06280942
syslog-ng 1651 root 47w REG 8,8 3347 5216298 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06281142
syslog-ng 1651 root 48w REG 8,8 129975 5216297 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06280942
syslog-ng 1651 root 49w REG 8,8 129975 5216297 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06280942
syslog-ng 1651 root 50w REG 8,8 3347 5216298 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06281142
syslog-ng 1651 root 51w REG 8,8 129975 5216297 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06280942
syslog-ng 1651 root 52w REG 8,8 1467 5216299 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06280842
syslog-ng 1651 root 53w REG 8,8 129975 5216297 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06280942
syslog-ng 1651 root 54w REG 8,8 129975 5216297 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06280942
syslog-ng 1651 root 55w REG 8,8 129975 5216297 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06280942
syslog-ng 1651 root 56w REG 8,8 129975 5216297 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06280942
syslog-ng 1651 root 57w REG 8,8 129975 5216297 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06280942
syslog-ng 1651 root 58w REG 8,8 1467 5216299 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06280842
syslog-ng 1651 root 59w REG 8,8 3347 5216298 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06281142
syslog-ng 1651 root 60w REG 8,8 129975 5216297 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06280942
syslog-ng 1651 root 61w REG 8,8 1467 5216299 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06280842
syslog-ng 1651 root 62w REG 8,8 1467 5216299 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06280842
syslog-ng 1651 root 63w REG 8,8 3347 5216298 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06281142
syslog-ng 1651 root 64w REG 8,8 3347 5216298 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06281142
syslog-ng 1651 root 65w REG 8,8 1467 5216299 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06280842
syslog-ng 1651 root 66w REG 8,8 3347 5216298 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06281142
syslog-ng 1651 root 67w REG 8,8 3347 5216298 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06281142
syslog-ng 1651 root 68w REG 8,8 129975 5216297 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06280942
syslog-ng 1651 root 69w REG 8,8 129975 5216297 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06280942
syslog-ng 1651 root 70w REG 8,8 3347 5216298 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06281142
syslog-ng 1651 root 71w REG 8,8 3347 5216298 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06281142
syslog-ng 1651 root 72w REG 8,8 35436 5216300 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06280943
syslog-ng 1651 root 73w REG 8,8 35436 5216300 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06280943
syslog-ng 1651 root 74w REG 8,8 129975 5216297 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06280942
syslog-ng 1651 root 75w REG 8,8 840 5216301 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06281143
syslog-ng 1651 root 76w REG 8,8 840 5216301 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06281143
syslog-ng 1651 root 77w REG 8,8 489 5216302 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06280843
syslog-ng 1651 root 78w REG 8,8 35436 5216300 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06280943
syslog-ng 1651 root 79w REG 8,8 840 5216301 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06281143
syslog-ng 1651 root 80w REG 8,8 840 5216301 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06281143
syslog-ng 1651 root 81w REG 8,8 35436 5216300 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06280943
syslog-ng 1651 root 82w REG 8,8 489 5216302 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06280843
syslog-ng 1651 root 83w REG 8,8 489 5216302 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06280843
[root at simda02 NSM]# ps -ef|grep syslog
root 1651 1 0 15:36 ? 00:00:01 ./syslog-ng -f /etc/syslog-ng/syslog-ng.conf
root 1682 1508 0 15:39 pts/2 00:00:00 grep syslog
[root at simda02 NSM]# kill -9 1651
[root at simda02 NSM]# echo;date;lsof +d /var/nsm/inbox/router/cisco/ios/12.0/syslog
Tue Jun 28 15:39:21 GMT 2005
[root at simda02 NSM]#
-----Original Message-----
From: syslog-ng-bounces at lists.balabit.hu [mailto:syslog-ng-bounces at lists.balabit.hu] On Behalf Of Balazs Scheidler
Sent: Monday, June 27, 2005 3:33 AM
To: Syslog-ng users' and developers' mailing list
Subject: RE: [syslog-ng] Error parsing conf file?
On Fri, 2005-06-24 at 09:15 -0600, Zb Indelak wrote:
> Thank you for such a quick turn-around on this issue. I've run into a
> couple more.
>
> 1) New files are being created with file permissions equal to the
> inverse of umask, entirely ignoring the permissions specified in the
> perm() option. Hardcoding the permissions in the open() call in
> affile.c fixes the problem (yes, I know it's not the way to do it, but
> I was in a hurry). In other words, it appears that the value of mode
> is all ones rather than whatever was specified in the perm() option.
this one is fixed, committed, the next snapshot should contain the fix.
>
> 2) Syslog-ng does not appear to be closing the log files and maintains
> a lock on the
> files until the application exits. This one is causing me no end of grief.
I don't really know what you mean here? syslog-ng does not lock files on its own and according to my tests dynamic output files were properly reaped (closed in time as time_reap() specifies)
non-dynamic files (which has no macros in the name) are not reaped, but IIRC syslog-ng 1.6.x did not reap those either.
--
Bazsi
_______________________________________________
syslog-ng maillist - syslog-ng at lists.balabit.hu https://lists.balabit.hu/mailman/listinfo/syslog-ng
Frequently asked questions at http://www.campin.net/syslog-ng/faq.html
More information about the syslog-ng
mailing list