* Patrick Shanahan <[EMAIL PROTECTED]> [07-16-07 20:24]:
> * Carlos E. R. <[EMAIL PROTECTED]> [07-16-07 19:27]:
 [...]
> > lsof | grep -E 'RPMDELETE|;|path inode='
> 
> Thanks.  Output from above:
> 
> 20:11 wahoo:~ # lsof | grep -E 'RPMDELETE|;|path inode='
> kded       6463        pat  mem       REG                8,6 914526 
> /usr/lib64/libdns_sd.so (path inode=678216)
 [...] 
> 
> Nothing stands out to me, except maybe kded.  Did:
>   kdeinit kded
> and the process restarted, but did not allow any change to the
> firewall log.
> 
> I will go back to runlevel 1 and return to 5, again (after posting
> this.)
> 
> 
> Perhaps you see something?

Dumb luck, but noticed that syslog-ng was not starting.  I commented
prior about this.  What I *didn't* say was that 'rcsyslog start' did
not start syslog-ng.  

Further searching revealed that syslog-ng was not referenced in
/etc/sysconfig/syslog.  I have a prior install of 10.1 on another
drive for reference.  Compared the syslog files and wrote the
differences to /etc/sysconfig/syslog.  Now going from runlevel 1 to 3
starts syslog-ng and the firewall logging has returned.

Another revelation, the change time on /etc/sysconfig/syslog was 11
July, not the 13th where the firewall logging halted.  I surmise that
syslog was not stopped and failed to restart until I went to runlevel
1 to try to recover from the system thinking there was no free space
on /home ????

What generates /etc/sysconfig/syslog as rpm -qf doesn't know?

Thanks for everyone's indulgence,
-- 
Patrick Shanahan         Plainfield, Indiana, USA        HOG # US1244711
http://wahoo.no-ip.org     Photo Album:  http://wahoo.no-ip.org/gallery2
Registered Linux User #207535                    @ http://counter.li.org
-- 
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to