[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: [cobalt-security] syslogd restart twice
- Subject: Re: [cobalt-security] syslogd restart twice
- From: "Jelmer Jellema" <lists@xxxxxxxxxxxxxxx>
- Date: Mon, 3 Mar 2003 12:11:14 +0100
- Organization: Spin in het Web www.spininhetweb.nl
- List-id: Mailing list for users to address network security on Cobalt products. <cobalt-security.list.cobalt.com>
> Anyone know why this might be happening?
>
> Unusual System Events
> =-=-=-=-=-=-=-=-=-=-=
> Mar 1 04:28:00 www syslogd 1.3-3: restart.
> Mar 1 04:30:14 www syslogd 1.3-3: restart.
>
> It just happens once in a while, not every day.
Wild guess: syslogd gets restarted by logrotate, after it pruned a logfile.
In /etc/logrotate.conf and /etc/logrotate.d, you'll find multiple entries
for logfiles that get filled through syslogd. So, maybe one file is cleared
every day, and another one is cleared one a week, or when it's bigger than
1MB (for example). Than sometimes, it just happens that both files get
cleaned after eachother, causing logrotate to restart syslogd after cleaning
the first file, and again after cleaning the second.
Jelmer