autopsy of a pair of metalog processes

metalog.txt (text/plain), 2.14 KB, created by Martin von Gagern on 2005-06-14 07:37:34 UTC

# ps -C metalog -O cmd
  PID CMD                         S TTY          TIME COMMAND
 9309 metalog [MASTER]            S ?        00:00:00 metalog [MASTER]         
 9310 metalog [KERNEL]            S ?        00:00:00 metalog [KERNEL]         
19881 metalog [MASTER]            S ?        00:00:00 metalog [MASTER]         
19882 metalog [KERNEL]            S ?        00:00:00 metalog [KERNEL]         

# ls -l /proc/93{09,10}/fd
9309/fd:
total 15
lr-x------  1 root root 64 Jun 14 16:13 0 -> /dev/null
l-wx------  1 root root 64 Jun 14 16:13 1 -> /dev/null
l-wx------  1 root root 64 Jun 14 16:13 10 -> /var/log/sshd/current
l-wx------  1 root root 64 Jun 14 16:13 11 -> /var/log/mail/current
l-wx------  1 root root 64 Jun 14 16:13 12 -> /var/log/fetchmail/current
l-wx------  1 root root 64 Jun 14 16:13 13 -> /var/log/crond/current
l-wx------  1 root root 64 Jun 14 16:13 14 -> /var/log/postfix/current
l-wx------  1 root root 64 Jun 14 16:13 2 -> /dev/null
lrwx------  1 root root 64 Jun 14 16:13 3 -> socket:[9776]
lrwx------  1 root root 64 Jun 14 16:13 4 -> socket:[9778]
lrwx------  1 root root 64 Jun 14 16:13 5 -> socket:[9779]
l-wx------  1 root root 64 Jun 14 16:13 6 -> /var/log/everything/current
l-wx------  1 root root 64 Jun 14 16:13 7 -> /var/log/critical/current
l-wx------  1 root root 64 Jun 14 16:13 8 -> /var/log/kernel/current
l-wx------  1 root root 64 Jun 14 16:13 9 -> /var/log/everything/current

9310/fd:
total 6
lr-x------  1 root root 64 Jun 14 16:13 0 -> /dev/null
l-wx------  1 root root 64 Jun 14 16:13 1 -> /dev/null
l-wx------  1 root root 64 Jun 14 16:13 2 -> /dev/null
lrwx------  1 root root 64 Jun 14 16:13 3 -> socket:[9776]
lrwx------  1 root root 64 Jun 14 16:13 4 -> socket:[9778]
lrwx------  1 root root 64 Jun 14 16:13 5 -> socket:[9779]

# netstat -xa | grep '977[689]'
unix  31     [ ]         DGRAM                    9776   /dev/log
unix  3      [ ]         STREAM     CONNECTED     9779   
unix  3      [ ]         STREAM     CONNECTED     9778   

# strace -p 9309
Process 9309 attached - interrupt to quit
futex(0xb7faeecc, FUTEX_WAIT, 2, NULL

# strace -p 9310
Process 9310 attached - interrupt to quit
syslog(0x2, 0xbfffdd70, 0x800