Mark Delany <[EMAIL PROTECTED]> writes:
> I just did a count of a couple of (smallish) log files and I found that
> on average, qmail-send is logging 469 bytes per delivery and sendmail is
> logging 430 bytes per delivery. FWIW, the qmail logging is piping into
> logger.
> My strawman conclusion? qmail and sendmail log similar amounts of data
> per delivery.
It's not the bytes so much as the lines. I may be extremely confused, but
I believe that logger and splogger both log each separate line to syslog
as a separate syslog() call. Each one of these messages therefore
requires separate handling by the syslogd daemon, a separate disk write,
and (the part that particular hurts) a separate fsync() call on systems
that don't support unsync'd syslog logs. The fact that sendmail embeds
all of the information in two lines per message instead of seven therefore
makes a big difference.
But see my followup message. Even taking that into account doesn't
explain how incredibly slow syslogd is.
--
Russ Allbery ([EMAIL PROTECTED]) <URL:http://www.eyrie.org/~eagle/>
