[syslog-ng] "Illegal seek" with file("/proc/net/xt_recent/violators")

[Valentijn Sessink]

On 07-09-13 16:12, Evan Rempel wrote:
> Couldn't you just use flush_lines(1) for that destination?

No, the problem is with the file (write-)pointer; the kernel source 
wants it to be 0, otherwise an error will occur.

This means, in a nutshell, that you must open()-write()-close() the 
destination.

flush_lines(1) doesn't do that.

Something like "time_reap(0)" ("close destination file after 0 seconds") 
could do this theoretically, but I don't think bending the configuration 
this much is feasible...

Best regards,

Valentijn