Logger messages getting stuck in a buffer somewhere?

From: Karen Wieprecht (karen.wieprecht_at_jhuapl.edu)
Date: 01/21/05

  • Next message: Barry Margolin: "Re: Logger messages getting stuck in a buffer somewhere?"
    Date: Fri, 21 Jan 2005 16:28:11 -0500
    
    

    Hi,
    I wrote a perl script to process audit data into something a human can make
    sense of and then log it to syslog via the "logger" command. Program works
    great if I send output to the command line, but if I feed it through logger,
    messages come out sporadically like they are stuck in a buffer on occasion.
    I changed the program to use a file handle and an exec pipe to logger so I
    could enable "autoflush" on the file handle, and I still get the
    intermittent delays. I tried bypassing the logger program and using a low
    level perl "syslog" call instead (I have a post up on a perl news group
    right now on that because I couldn't get it to give me any output at all).

    With the delay, I have messages coming into the system log often grossly out
    of order. Sample of the problem:

        [audit] karen logged in via telnet
    (auditing picks this up)
        karen logged out
    (logger message sent by /etc/csh.logout)
        telnet session closed
    (some message send to syslog by telnetd)
        [audit] karen failed to rm /etc/shadow: permission denied (delayed
    auditing message eventually shows up in syslog after karen already logged
    out)

    So … any idea why the logger messages might be getting hung up in a buffer
    somewhere? Have any idea how I might get around that? Any pointers in the
    right direction would be greatly appreciated. Thanks.
    If you need the OS, it's Irix 6.5.26 (which is system V I believe) …


  • Next message: Barry Margolin: "Re: Logger messages getting stuck in a buffer somewhere?"

    Relevant Pages