[syslog-ng] lsof shows open files which should be closed

Balazs Scheidler bazsi at balabit.hu
Thu Dec 20 21:47:18 CET 2007


On Thu, 2007-12-20 at 12:31 -0800, Evan Rempel wrote:
> I know nothing of the timer architecture used within syslog-ng, but just to create
> discussion, could it be that a completed timer is missed? Something like
> one timer completes and while it is being processed (the file is being closed/reaped)
> another timer completes which is missed. This would probably only
> show up on systems that have been configured to log to a large number of files.
> 

No, this is not possible. syslog-ng is single threaded and the timer in
glib fires every now and then. The reap timeout specified in the
configuration is 10 seconds.

I still think that my patch is correct, that's the only possible
explanation. But let's wait for the results of the test.

-- 
Bazsi



More information about the syslog-ng mailing list