Logger messages getting stuck in a buffer somewhere?
From: Karen Wieprecht (karen.wieprecht_at_jhuapl.edu)
Date: 01/21/05
- Previous message: Tim Haynes: "Re: QCTerm and Cobol in Unix"
- Next in thread: Barry Margolin: "Re: Logger messages getting stuck in a buffer somewhere?"
- Reply: Barry Margolin: "Re: Logger messages getting stuck in a buffer somewhere?"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]
Date: Fri, 21 Jan 2005 16:28:11 -0500
Hi,
I wrote a perl script to process audit data into something a human can make
sense of and then log it to syslog via the "logger" command. Program works
great if I send output to the command line, but if I feed it through logger,
messages come out sporadically like they are stuck in a buffer on occasion.
I changed the program to use a file handle and an exec pipe to logger so I
could enable "autoflush" on the file handle, and I still get the
intermittent delays. I tried bypassing the logger program and using a low
level perl "syslog" call instead (I have a post up on a perl news group
right now on that because I couldn't get it to give me any output at all).
With the delay, I have messages coming into the system log often grossly out
of order. Sample of the problem:
[audit] karen logged in via telnet
(auditing picks this up)
karen logged out
(logger message sent by /etc/csh.logout)
telnet session closed
(some message send to syslog by telnetd)
[audit] karen failed to rm /etc/shadow: permission denied (delayed
auditing message eventually shows up in syslog after karen already logged
out)
So … any idea why the logger messages might be getting hung up in a buffer
somewhere? Have any idea how I might get around that? Any pointers in the
right direction would be greatly appreciated. Thanks.
If you need the OS, it's Irix 6.5.26 (which is system V I believe) …
- Previous message: Tim Haynes: "Re: QCTerm and Cobol in Unix"
- Next in thread: Barry Margolin: "Re: Logger messages getting stuck in a buffer somewhere?"
- Reply: Barry Margolin: "Re: Logger messages getting stuck in a buffer somewhere?"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]
Relevant Pages
|