Date: Thu, 21 Aug 2008 15:42:47 -0400 From: Mikhail Teterin <mi+mill@aldan.algebra.com> To: David Wolfskill <david@catwhisker.org>, freebsd-stable@freebsd.org Subject: feeding log-messages (Re: machine hangs on occasion - correlated with ssh break-in attempts) Message-ID: <48ADC537.8030807@aldan.algebra.com> In-Reply-To: <20080821183130.GQ801@bunrab.catwhisker.org> References: <48ADA81E.7090106@aldan.algebra.com> <20080821183130.GQ801@bunrab.catwhisker.org>
next in thread | previous in thread | raw e-mail | index | archive | help
David Wolfskill ΞΑΠΙΣΑΧ(ΜΑ):
> While the amount of work involved was assuredly greater in that case
> than in yours, those of us who were actually building and running the
> relays in question were very unsurprised when Postfix performance
> improved significantly following a redesign of the application, so
> that /var/log/maillog was written by syslogd(8) and the Perl script
> was effectively fed via "tail -F".
In my setup, syslogd does both -- append the message to the appropriate
log-file (in this case -- /var/log/auth.log) and feed it to the script's
stdin. From syslogd.conf:
auth.info;authpriv.info /var/log/auth.log
auth.info;authpriv.info
|/opt/sbin/auth-log-watch
"tail -F" seems just wrong :-)
-mi
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?48ADC537.8030807>