> -----Original Message----- > From: [email protected] [mailto:rsyslog- > [email protected]] On Behalf Of David MZ > Sent: Wednesday, November 28, 2012 5:48 PM > To: rsyslog-users > Subject: Re: [rsyslog] imklog: error reading kernel log - shutting > down: Bad file descriptor - help > > Can anyone take a look?
David, are you fine with building from source, specifically from git tree? I probably need more debug instrumentation in order to see what's going on. Also, 7.2.0 is a bit dated, so that alone makes it worth updating. Rainer > > > On Sun, Nov 25, 2012 at 7:30 PM, David MZ <[email protected]> > wrote: > > > On Ubuntu 12.04 6Bit > > > > here is the version, I installed from a PPA > > https://launchpad.net/~ukplc-team/+archive/testing > > > > rsyslogd 7.2.0, compiled with: > > FEATURE_REGEXP: Yes > > FEATURE_LARGEFILE: No > > GSSAPI Kerberos 5 support: Yes > > FEATURE_DEBUG (debug build, slow code): No > > 32bit Atomic operations supported: Yes > > 64bit Atomic operations supported: Yes > > Runtime Instrumentation (slow code): No > > > > > > > > > > > > On Sat, Nov 24, 2012 at 1:26 PM, David Lang <[email protected]> wrote: > > > >> what version are you running? > >> > >> I seem to remember bumping into this several years ago when I was > using > >> an old version of rsyslog with a new kernel (or vice-versa) and the > >> mechanism for getting logs from the kernel changed. > >> > >> David Lang > >> > >> > >> On Sat, 24 Nov 2012, David MZ wrote: > >> > >> /var/log/syslog is full of this kind of lines and rsyslogd CPU is > on 94% > >>> I have disabled the kernel logging module and all is fine, but I > rather > >>> fix > >>> this > >>> > >>> Thanks > >>> > >>> Nov 24 01:21:47 mail rsyslogd: imklog: error reading kernel log - > >>> shutting > >>> down: Bad file descriptor > >>> Nov 24 01:22:48 mail rsyslogd: last message repeated 14821281 times > >>> Nov 24 01:23:49 mail rsyslogd: last message repeated 15237075 times > >>> Nov 24 01:24:50 mail rsyslogd: last message repeated 15314903 times > >>> Nov 24 01:25:01 mail rsyslogd: last message repeated 2813671 times > >>> Nov 24 01:25:01 mail CRON[17150]: (root) CMD (cd / && run-parts -- > report > >>> /etc/cron.hourly) > >>> Nov 24 01:25:01 mail rsyslogd: imklog: error reading kernel log - > >>> shutting > >>> down: Bad file descriptor > >>> Nov 24 01:26:02 mail rsyslogd: last message repeated 14835911 times > >>> Nov 24 01:27:02 mail rsyslogd: last message repeated 14916437 times > >>> Nov 24 01:28:02 mail rsyslogd: last message repeated 14783490 times > >>> Nov 24 01:29:02 mail rsyslogd: last message repeated 14856562 times > >>> Nov 24 01:30:02 mail rsyslogd: last message repeated 14440728 times > >>> Nov 24 01:31:02 mail rsyslogd: last message repeated 14401722 times > >>> Nov 24 01:32:03 mail rsyslogd: last message repeated 14426711 times > >>> Nov 24 01:33:03 mail rsyslogd: last message repeated 14517640 times > >>> Nov 24 01:34:03 mail rsyslogd: last message repeated 14447503 times > >>> Nov 24 01:35:03 mail rsyslogd: last message repeated 14098839 times > >>> Nov 24 01:36:03 mail rsyslogd: last message repeated 14653521 times > >>> Nov 24 01:37:03 mail rsyslogd: last message repeated 14555447 times > >>> Nov 24 01:38:03 mail rsyslogd: last message repeated 14621594 times > >>> Nov 24 01:39:03 mail rsyslogd: last message repeated 14450839 times > >>> Nov 24 01:40:03 mail rsyslogd: last message repeated 14331344 times > >>> ______________________________**_________________ > >>> rsyslog mailing list > >>> > http://lists.adiscon.net/**mailman/listinfo/rsyslog<http://lists.adisco > n.net/mailman/listinfo/rsyslog> > >>> http://www.rsyslog.com/**professional- > services/<http://www.rsyslog.com/professional-services/> > >>> What's up with rsyslog? Follow https://twitter.com/rgerhards > >>> NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a > myriad > >>> of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if > you > >>> DON'T LIKE THAT. > >>> > >>> ______________________________**_________________ > >> rsyslog mailing list > >> > http://lists.adiscon.net/**mailman/listinfo/rsyslog<http://lists.adisco > n.net/mailman/listinfo/rsyslog> > >> http://www.rsyslog.com/**professional- > services/<http://www.rsyslog.com/professional-services/> > >> What's up with rsyslog? Follow https://twitter.com/rgerhards > >> NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a > myriad > >> of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if > you > >> DON'T LIKE THAT. > >> > > > > > _______________________________________________ > rsyslog mailing list > http://lists.adiscon.net/mailman/listinfo/rsyslog > http://www.rsyslog.com/professional-services/ > What's up with rsyslog? Follow https://twitter.com/rgerhards > NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a > myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST > if you DON'T LIKE THAT. _______________________________________________ rsyslog mailing list http://lists.adiscon.net/mailman/listinfo/rsyslog http://www.rsyslog.com/professional-services/ What's up with rsyslog? Follow https://twitter.com/rgerhards NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE THAT.
