Hello, I don't know if it is a real bug or related to the configuration file but after reading manual nothing about this --MARK--. I recently upgraded syslog-ng to the latest version (that is marked as stable) and now when it is started I have a 100% CPU usage because syslog-ng loop write the same line in /var/log/messages. Here an example of it : .... Jul 11 09:55:41 Tiger -- MARK -- Jul 11 09:55:41 Tiger -- MARK -- Jul 11 09:55:41 Tiger -- MARK -- Jul 11 09:55:41 Tiger -- MARK -- .... Here my configuration file : ###################################################################### @version: 3.0 # $Header: /var/cvsroot/gentoo-x86/app-admin/syslog-ng/files/syslog-ng.conf.gentoo.3,v 1.1 2010/04/06 02:11:35 mr_bones_ Exp $ # # Syslog-ng default configuration file for Gentoo Linux options { chain_hostnames(no); # The default action of syslog-ng is to log a STATS line # to the file every 10 minutes. That's pretty ugly after a while. # Change it to every 12 hours so you get a nice daily update of # how many messages syslog-ng missed (0). stats_freq(43200); }; source src { unix-stream("/dev/log" max-connections(256)); internal(); file("/proc/kmsg"); }; destination messages { file("/var/log/messages"); }; # By default messages are logged to tty12... destination console_all { file("/dev/tty12"); }; # ...if you intend to use /dev/console for programs like xconsole # you can comment out the destination line above that references /dev/tty12 # and uncomment the line below. #destination console_all { file("/dev/console"); }; log { source(src); destination(messages); }; log { source(src); destination(console_all); }; Maybe it is clock related too, I changed clock time yesterday. emerge --info Portage 2.1.8.3 (default/linux/amd64/10.0, gcc-4.4.2, glibc-2.11.2-r0, 2.6.32-gentoo-Tiger x86_64) ================================================================= System uname: Linux-2.6.32-gentoo-Tiger-x86_64-AMD_Athlon-tm-_64_X2_Dual_Core_Processor_3800+-with-gentoo-2.0.1 Timestamp of tree: Sat, 10 Jul 2010 00:45:03 +0000 distcc 3.1 x86_64-pc-linux-gnu [disabled] app-shells/bash: 4.1_p7 dev-java/java-config: 1.3.7-r1, 2.1.10 dev-lang/python: 2.5.2-r8, 2.6.5-r2, 3.1.2-r3 dev-util/cmake: 2.8.1-r2 sys-apps/baselayout: 2.0.1 sys-apps/openrc: 0.6.1-r1 sys-apps/sandbox: 2.2 sys-devel/autoconf: 2.13, 2.65-r1 sys-devel/automake: 1.4_p6, 1.5, 1.7.9-r1, 1.8.5-r3, 1.9.6-r3, 1.10.3, 1.11.1 sys-devel/binutils: 2.20.1-r1 sys-devel/gcc: 4.3.5, 4.4.2 sys-devel/gcc-config: 1.4.1 sys-devel/libtool: 2.2.10 virtual/os-headers: 2.6.34 ACCEPT_KEYWORDS="amd64 ~amd64" ACCEPT_LICENSE="*" CBUILD="x86_64-pc-linux-gnu" CFLAGS="-march=athlon64 -O2 -pipe -fomit-frame-pointer" CHOST="x86_64-pc-linux-gnu" CONFIG_PROTECT="/etc /usr/share/X11/xkb /usr/share/config" CONFIG_PROTECT_MASK="/etc/ca-certificates.conf /etc/env.d /etc/env.d/java/ /etc/fonts/fonts.conf /etc/gconf /etc/gentoo-release /etc/php/apache2-php5/ext-active/ /etc/php/cgi-php5/ext-active/ /etc/php/cli-php5/ext-active/ /etc/revdep-rebuild /etc/sandbox.d /etc/terminfo" CXXFLAGS="-march=athlon64 -O2 -pipe -fomit-frame-pointer" DISTDIR="/usr/portage/distfiles" FEATURES="assume-digests distlocks fixpackages news protect-owned sandbox sfperms strict unmerge-logs unmerge-orphans userfetch" GENTOO_MIRRORS="http://mirror.ovh.net/gentoo-distfiles" LANG="fr_FR.utf8" LC_ALL="fr_FR.utf8" LDFLAGS="-Wl,-O1" LINGUAS="fr fr_FR en" MAKEOPTS="-j3" PKGDIR="/usr/portage/packages" PORTAGE_CONFIGROOT="/" PORTAGE_RSYNC_OPTS="--recursive --links --safe-links --perms --times --compress --force --whole-file --delete --stats --timeout=180 --exclude=/distfiles --exclude=/local --exclude=/packages" PORTAGE_TMPDIR="/var/tmp" PORTDIR="/usr/portage" PORTDIR_OVERLAY="/home/tiger/portage" SYNC="rsync://servx/gentoo-portage" USE="3dnow 3dnowext X a52 aac acl alsa amd64 apic bash-completion berkdb bzip2 cairo cdda cdr cflush cli cmov cmp_legacy cr8legacy cracklib crypt cups cx16 cx8 cxx dbus de directfb dri dvd dvdr dvdread encode fbcon ffmpeg fid firefox flash fortran fpu ftp fxsr fxsr_opt gdbm gif gnutls gpm gtk gtk2 hal ht htmlhandbook iconv ipod jpeg kde kdehiddenvisibility lahf_lm lm logitech-mouse mad mca mce mmx mmxext modules mozilla mp3 msr mtrr mudflap multilib ncurses nls nptl nptlonly nx ogg opengl openmp pae pam pat pcre pdf perl pge php png pni pppd pse pse36 python qt qt3support qt4 readline reflection sdl sep session spl sse sse2 ssl stc svm syscall sysfs tcltk tcpd threads tm ts tsc ttp unicode usb vid vim-with-x vme vorbis wifi xcomposite xinerama xorg xvid zlib" ALSA_CARDS="hda-intel" ALSA_PCM_PLUGINS="adpcm alaw asym copy dmix dshare dsnoop empty extplug file hooks iec958 ioplug ladspa lfloat linear meter mmap_emul mulaw multi null plug rate route share shm softvol" APACHE2_MODULES="actions alias auth_basic authn_alias authn_anon authn_dbm authn_default authn_file authz_dbm authz_default authz_groupfile authz_host authz_owner authz_user autoindex cache dav dav_fs dav_lock deflate dir disk_cache env expires ext_filter file_cache filter headers include info log_config logio mem_cache mime mime_magic negotiation rewrite setenvif speling status unique_id userdir usertrack vhost_alias" ELIBC="glibc" INPUT_DEVICES="keyboard mouse" KERNEL="linux" LCD_DEVICES="bayrad cfontz cfontz633 glk hd44780 lb216 lcdm001 mtxorb ncurses text" LINGUAS="fr fr_FR en" RUBY_TARGETS="ruby18" USERLAND="GNU" VIDEO_CARDS="nvidia" XTABLES_ADDONS="quota2 psd pknock lscan length2 ipv4options ipset ipp2p iface geoip fuzzy condition tee tarpit sysrq steal rawnat logmark ipmark dhcpmac delude chaos account" Unset: CPPFLAGS, CTARGET, EMERGE_DEFAULT_OPTS, FFLAGS, INSTALL_MASK, PORTAGE_COMPRESS, PORTAGE_COMPRESS_FLAGS, PORTAGE_RSYNC_EXTRA_OPTS Reproducible: Always Steps to Reproduce:
Added mark_freq(0); in the configuration file, it fixed it but I doubt it is a real one. Nothing about this mark_freq in the manual. The question is how it happened, I tried to downgrade to 3.0.8 and got the same problem. My syslog-ng was working without this option before. Something broken this.
(In reply to comment #1) > Added mark_freq(0); in the configuration file, it fixed it but I doubt it is a > real one. Nothing about this mark_freq in the manual. If you mean the man page - that's badly written, incomplete and outdated to boot, and that's worthy of its own bug. Try [1] instead. > The question is how it happened, I tried to downgrade to 3.0.8 and got the same > problem. What problem? (This is what you get if you file one bug report for more than one issue.) [1] http://www.balabit.com/dl/guides/syslog-ng-ose-v3.1-guide-admin-en.pdf
