[syslog-ng] I/O error since upgrade to v1.9.9-1

[ma.LAN.ge]

> On Wed, 2006-04-05 at 20:00 +0200, ma.LAN.ge wrote:
> > > > Yesterday I updated my Debian Etch (kernel 2.6.16-1) with syslog-ng
> > > > v1.9.9-1.
> > > > 
> > > > I had to modify syslog-ng.conf, cause syslog-ng did not start after
> > > > upgrading (syntax error line xxx).
> > > 
> > > I already reported similar issues in our bugzilla about (currently)
> > > unimplemented features in the 1.9 branch which were working in the 1.6
> > > branch. Hopefully Bazsi will implement the missing features or convert
> > > these errors into warnings and FIXME-s in the near future :))
> > > 
> > > > OK, I merged my old .conf with the new .conf and cleaned some old
> .log
> > > files
> > > > in /var/log/.
> > > > 
> > > > syslog-ng script started now w/o any syntax errors, but in
> > > /var/log/messages
> > > > folowing occurs massively and rapidly:
> > > > 
> > > > syslog-ng: I/O error occurred while writing, error='Operation not
> > > permitted
> > > > (1)', fd='5' | fd='17'
> > > 
> > > If your configuration isn't confidental, please post your
> configuration
> > OK, attached. (now compressed ;)
> > > with the list of the /proc/[syslog-ng_pid]/fd directory.
> > Hm, unbeliebvable, but true: I only restarted syslog-ng and it seems to
> > work. No more errors like mentioned above occurred anymore (until now
> =).
> 
> It must have been some kind of permission problem on one/more of the
> destination files. "Operation not permitted" was returned in response
> for write().
OK, I've got this problem again. (see attachments, 1 for private mail)
I attached the syslog and a pic from the /proc/<pid>/fd/ directory with
sockets etc.
The syslog seems to point me to a possible reason: while initializing my
firewall with iptables rules, these I/O errors occur. After that, the errors
disappear in syslog.
But a good syslog should always be started before most services, cause it
should log system messages ;)
So it should also work while initializing my firewall rules 8)
So, how can we cath this problem to find a solution?
> 
> > 
> > But a question besides: How can I hide the syslog-ng 'log statistics'
> list
> > from being displayed in syslog? It nerves a little bit ;)
> 
> use stats_freq(-1) in your global options.
Thx for this =)

-- 
Thx in advance

"Feel free" - 10 GB Mailbox, 100 FreeSMS/Monat ...
Jetzt GMX TopMail testen: http://www.gmx.net/de/go/topmail
-------------- next part --------------
A non-text attachment was scrubbed...
Name: syslog
Type: application/octet-stream
Size: 1181 bytes
Desc: not available
Url : http://lists.balabit.hu/pipermail/syslog-ng/attachments/20060406/d595625a/syslog.obj