Date: Sun, 28 Feb 2010 08:58:55 -0800 From: Vince Valenti <vince@blue-box.net> To: Marin Atanasov <dnaeon@gmail.com> Cc: Damian Gerow <dgerow@afflictions.org>, freebsd-ports@freebsd.org Subject: Re: sysutils/syslog-ng3 processes Message-ID: <7b789d83aa51670b0ed7be90438c6e1c@localhost> In-Reply-To: <717f7a3e1002270606v2e931e07ja072434bb1969f6f@mail.gmail.com> References: <717f7a3e1002260651k1ce06986u4332c637b94d07ce@mail.gmail.com> <20100226165636.GD21540@plebeian.afflictions.org> <717f7a3e1002270606v2e931e07ja072434bb1969f6f@mail.gmail.com>
next in thread | previous in thread | raw e-mail | index | archive | help
I'm actually no longer the maintainer of the port, but if you check sockstat, you will notice the second process is the one that is actually listening to the network, etc: # ps auxww|grep syslog root 29196 0.0 0.0 5320 2172 ?? I 8:40AM 0:00.00 /usr/local/sbin/syslog-ng -p /var/run/syslog.pid root 29197 0.0 0.0 5320 2432 ?? Ss 8:40AM 0:00.04 /usr/local/sbin/syslog-ng -p /var/run/syslog.pid # sockstat|grep syslog root syslog-ng 29197 3 dgram /var/run/log root syslog-ng 29197 5 stream /var/db/syslog-ng.ctl root syslog-ng 29197 6 dgram /var/run/logpriv root syslog-ng 29197 7 udp4 *:514 *:* My guess is that this is by design. In fact, I've checked syslog-ng on a Linux machine (gasp) and it also runs two processes: root 30648 0.0 0.0 29428 868 ? S 04:02 0:00 supervising syslog-ng root 30649 0.0 0.0 35984 2404 ? Ss 04:02 0:06 /opt/syslog-ng/sbin/syslog-ng --no-caps -Vince On Sat, 27 Feb 2010 16:06:40 +0200, Marin Atanasov wrote: On Fri, Feb 26, 2010 at 6:56 PM, Damian Gerow wrote: Marin Atanasov wrote: : I've noticed that when I start syslog-ng3 daemon it starts two processes. I : haven't seen this when running syslog-ng. : : Here are the processes: : : root 554 0.0 0.1 5320 2092 ?? I 4:46PM 0:00.00 : /usr/local/sbin/syslog-ng -p /var/run/syslog.pid : root 555 0.0 0.1 5320 2456 ?? Ss 4:46PM 0:00.02 : /usr/local/sbin/syslog-ng -p /var/run/syslog.pid : : I was wondering why it actually start two (identical?) processes? Anyone has : an idea? Is this normal? What does "ps -j | grep syslog-ng" show you? It's possible 554 is spawning 555. Hi, You were right - syslog-ng3 is spawing the second process. Here's the output, after I've restarted syslog-ng3. The PIDs are 1013 and 1014, and 1013 is spawning 1014. # ps axuw | sed -n -e '1p' -e '/syslog/p' USER PID %CPU %MEM VSZ RSS TT STAT STARTED TIME COMMAND root 1013 0.0 0.1 5320 2280 ?? I 5:26PM 0:00.00 /usr/local/sbin/syslog-ng -p /var/run/syslog-ng.pid root 1014 0.0 0.1 5320 2588 ?? Ss 5:26PM 0:06.20 /usr/local/sbin/syslog-ng -p /var/run/syslog-ng.pid # ps jaxuw | sed -n -e '1p' -e '/1014/p' USER PID PPID PGID SID JOBC STAT TT TIME COMMAND %CPU %MEM VSZ RSS STARTED root 1014 1013 1014 1014 0 Ss ?? 0:06.20 /usr/local/sbin/ 0.0 0.1 5320 2588 5:26PM I've CCed the maintainer of the port, so if he's available he could explain better. Regards, Marin -- Marin Atanasov Nikolov dnaeon AT gmail DOT com daemon AT unix-heaven DOT org Links: ------ [1] mailto:dgerow@afflictions.org
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?7b789d83aa51670b0ed7be90438c6e1c>