[syslog-ng] follow_freq for unix-stream/unix-dgram sources

Balazs Scheidler bazsi at balabit.hu
Tue Mar 1 19:30:16 CET 2011


On Mon, 2011-02-28 at 10:56 +0100, Sandor Geller wrote:
> Hi,
> 
> On Sat, Feb 26, 2011 at 9:09 PM, Aleksei Plotnikov <quadrun at hot.ee> wrote:
> > Hello,
> >
> > In "syslog-ng 3.0 Administrator Guide" one of options for unix-stream and
> > unix-datagram sources is "follow_freq", which is default 1 according to
> > manual. But when I explicitly set it in source
> > config to "unix-stream("/dev/log" follow_freq(1))" or any other positive
> > value, syslog-ng start to consume all memory and than crashes after some
> > time. Also log is full of such messages:
> >
> >  "syslog-ng[11189]: Error invoking seek on followed file; error='Illegal
> > seek (29)'"
> 
> follow_freq meant to be available for regular files only so it's
> definitely a bug that it's settable for non-

Yes, follow_freq() shouldn't be applied to non-regular-file sources,
that even includes /proc/kmsg on Linux or device files.

It should be removed from the docs altogether.

-- 
Bazsi



More information about the syslog-ng mailing list