[syslog-ng] follow_freq for unix-stream/unix-dgram sources
Balazs Scheidler
bazsi at balabit.hu
Tue Mar 1 19:30:16 CET 2011
On Mon, 2011-02-28 at 10:56 +0100, Sandor Geller wrote:
> Hi,
>
> On Sat, Feb 26, 2011 at 9:09 PM, Aleksei Plotnikov <quadrun at hot.ee> wrote:
> > Hello,
> >
> > In "syslog-ng 3.0 Administrator Guide" one of options for unix-stream and
> > unix-datagram sources is "follow_freq", which is default 1 according to
> > manual. But when I explicitly set it in source
> > config to "unix-stream("/dev/log" follow_freq(1))" or any other positive
> > value, syslog-ng start to consume all memory and than crashes after some
> > time. Also log is full of such messages:
> >
> > "syslog-ng[11189]: Error invoking seek on followed file; error='Illegal
> > seek (29)'"
>
> follow_freq meant to be available for regular files only so it's
> definitely a bug that it's settable for non-
Yes, follow_freq() shouldn't be applied to non-regular-file sources,
that even includes /proc/kmsg on Linux or device files.
It should be removed from the docs altogether.
--
Bazsi
More information about the syslog-ng
mailing list