I reported this the other day with the subject
infinite logs. The culprit are the entries for mail
and news in the "/etc/logrotate.d/syslog":
/var/log/mail/* {
rotate 5
weekly
postrotate
/usr/bin/killall -HUP syslogd
endscript
}
/var/log/news/* {
rotate 5
weekly
postrotate
/usr/bin/killall -HUP syslogd
endscript
}
The problem is that using an "*" alone would cause
**all** files in the dir to be rotated, including the
previosly rotated files, and as a result you will get
more and more files with longer and longer filenames
each day. The solution would be to specify something
like "*log", also note that using "mail*" or "news*"
would also have the same effect since rotated files
match that pattern.
--- Anton Graham <[EMAIL PROTECTED]> wrote:
> This simply isn't playing nice :/ On its daily run,
> it's fine, but on
> the weekly, it runs for well over an hour restarting
> syslogd several
> times per second. It hasn't completed yet for this
> weekly rotate, but:
>
> root@bladehawke /var/log # head syslog; echo ; tail
> syslog; echo ; \
> grep "syslogd 1.3-3: restart" syslog | wc -l
> Aug 20 15:02:40 bladehawke syslogd 1.3-3: restart.
> Aug 20 15:02:51 bladehawke syslogd 1.3-3: restart.
> Aug 20 15:02:51 bladehawke syslogd 1.3-3: restart.
> Aug 20 15:02:53 bladehawke syslogd 1.3-3: restart.
> Aug 20 15:02:53 bladehawke syslogd 1.3-3: restart.
> Aug 20 15:02:56 bladehawke syslogd 1.3-3: restart.
> Aug 20 15:02:57 bladehawke syslogd 1.3-3: restart.
> Aug 20 15:02:58 bladehawke syslogd 1.3-3: restart.
> Aug 20 15:03:06 bladehawke syslogd 1.3-3: restart.
> Aug 20 15:03:06 bladehawke syslogd 1.3-3: restart.
>
> Aug 20 15:44:52 bladehawke syslogd 1.3-3: restart.
> Aug 20 15:44:52 bladehawke syslogd 1.3-3: restart.
> Aug 20 15:44:53 bladehawke syslogd 1.3-3: restart.
> Aug 20 15:44:53 bladehawke syslogd 1.3-3: restart.
> Aug 20 15:44:53 bladehawke syslogd 1.3-3: restart.
> Aug 20 15:44:53 bladehawke syslogd 1.3-3: restart.
> Aug 20 15:44:53 bladehawke syslogd 1.3-3: restart.
> Aug 20 15:44:53 bladehawke syslogd 1.3-3: restart.
> Aug 20 15:44:54 bladehawke syslogd 1.3-3: restart.
> Aug 20 15:44:54 bladehawke syslogd 1.3-3: restart.
>
> 13478
>
> No matter what kind of rotation is needed,
> restarting syslogd 13,478
> times is a _little_ overboard. If last week's logs
> are any indication,
> I'm about 2/3 of the way through it:
>
> root@bladehawke /var/log # zcat syslog.1.gz |\
> grep "syslogd 1.3-3: restart" | grep "Aug 13" | wc
> -l
> 21885
>
>
>
> --
> Anton Graham GPG ID:
> 0x18F78541
> <[EMAIL PROTECTED]> RSA key
> available upon request
>
> Perhaps no person can be a poet, or even enjoy
> poetry without a certain
> unsoundness of mind.
> -- Thomas Macaulay
>
>
=====
________________________
Eugenio Diaz, BSEE/BSCE
Linux Engineer
[EMAIL PROTECTED]
__________________________________________________
Do You Yahoo!?
Yahoo! Mail � Free email you can access from anywhere!
http://mail.yahoo.com/
