Rainer Gerhards escribió: > Mikel, > > sorry, I was busy yesterday. See inline... > On Thu, 2008-11-27 at 10:07 +0100, Mikel Jimenez wrote: > > >> Last question: >> Why could be the reason, if I block internet in this host, and when pass >> 10-12 hours, obviously not logging to remote (because firewall), but why >> not locally to? >> >> I do: >> logger "message" >> >> And I have not notice in /var/log/syslog or /var/log/messages, and in >> normal situations yes... >> > > If I am right (the update will prove that) the reason is that the local > log socket is not read (because rsyslog delays imuxsock) and thus fills > up. Then, other processes trying to write to that socket will block > during the write process. > > Please note that the rsyslog core will discard messages after some time, > but the rate at which this happens is too slow to get the system back to > normal. As I said, this should disappear with the recent stable version. > > HTH > Rainer > > _______________________________________________ > rsyslog mailing list > http://lists.adiscon.net/mailman/listinfo/rsyslog > http://www.rsyslog.com > Thanks for your explication Rainer!! I will install 3.20 right now!!
-- Mikel Jimenez Fernandez Irontec, Internet y Sistemas sobre GNU/LinuX - http://www.irontec.com +34 94.404.81.82 _______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com
