On 8/14/07, Andrew Suffield <[EMAIL PROTECTED]> wrote: > That seems correctable. Pass the log through tac, use head instead of > tail, and pass the output of head through tac again. 'tail' is much faster. Even with a huge file (the one I tested with is 26 gigabytes) it simply mmap()s the file and then scans backwards until it's got enough newlines - it took about 1/20th of a second on that 26GB file. Perhaps shorewall is using a different, less efficient method?
Will ------------------------------------------------------------------------- This SF.net email is sponsored by: Splunk Inc. Still grepping through log files to find problems? Stop. Now Search log events and configuration files using AJAX and a browser. Download your FREE copy of Splunk now >> http://get.splunk.com/ _______________________________________________ Shorewall-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/shorewall-users
