[syslog-ng] Error parsing conf file?

Balazs Scheidler bazsi at balabit.hu
Thu Jun 30 11:07:51 CEST 2005

On Tue, 2005-06-28 at 09:46 -0600, Zb Indelak wrote:
> Thank you.  I downloaded the 20050628 snapshot and the file permission problem goes away.  I also collected some more information on the second problem I reported.
> First, the relevant portions of my config file:

> Now the symptoms.  I have an application that continuously monitors the 
> /var/nsm/inbox/router/cisco/ios/12.0/syslog directory and when a file is 
> released in that directory, the application copies it to its working directory
>  and removes it from the original directory.  The following shows the files
> in the directory when using syslog-ng 1.6.5 and then the same is repeated for 
> syslog-ng 1.9.4+20050628.  I have also noticed that while version 1.6.5 was 
> producing a single file in a directory per minute (and the time stamp corresponded
>  to current time), version 1.9.4 produces a number of files and
> the timestamp varies (probably depends on the timestamp received).

There was a problem in use_time_recvd() handling, which I've now fixed.

> *** Problems start here ***
> syslog-ng 1651 root   82w   REG    8,8    489 5216302 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06280843
> syslog-ng 1651 root   83w   REG    8,8    489 5216302 /var/nsm/inbox/router/cisco/ios/12.0/syslog/ios-06280843
> [root at simda02 NSM]# ps -ef|grep syslog
> root      1651     1  0 15:36 ?        00:00:01 ./syslog-ng -f /etc/syslog-ng/syslog-ng.conf
> root      1682  1508  0 15:39 pts/2    00:00:00 grep syslog
> [root at simda02 NSM]# kill -9 1651
> [root at simda02 NSM]# echo;date;lsof +d /var/nsm/inbox/router/cisco/ios/12.0/syslog

This seems to be an unrelated issue that it opens the same file multiple
times. This is no good. I'll look into this as well.


More information about the syslog-ng mailing list