<div dir="ltr"><br><br><div class="gmail_quote">On Wed, Jun 9, 2010 at 3:26 PM, Valery Reznic <span dir="ltr"><<a href="mailto:valery_reznic@yahoo.com">valery_reznic@yahoo.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">
<table cellpadding="0" cellspacing="0" border="0"><tbody><tr><td style="font-family: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; font-size: inherit; line-height: inherit; font-size-adjust: inherit; font-stretch: inherit;" valign="top">
Connect to syslogd with strace:<div><br></div><div>strace -p syslogd_pid</div><div><br></div><div>And then "provoke" message that should go to /var/log/messages </div><div>strace will show you what syslogd do.</div>
<div>May be it will reveal cause of the problem.</div></td></tr></tbody></table></blockquote><div><br>Does not help much. After the "select", it just stats /etc/localtime, and then writes the output to one of the open fd's<br>
(see my prev mail - the process does not open "messages" at all). For example:<br><br><br>select(1, [0], NULL, NULL, NULL) = 1 (in [0])<br>recvfrom(0, "<150>Jun 9 17:33:27 pppd[3998]:"..., 1022, 0, NULL, NULL) = 79<br>
rt_sigprocmask(SIG_BLOCK, [HUP ALRM], NULL, 8) = 0<br>stat("/etc/localtime", {st_mode=S_IFREG|0644, st_size=803, ...}) = 0<br>writev(2, [{"Jun 9 17:33:27", 15}, {" ", 1}, {"penguin", 7}, {" ", 1}, {"pppd[3998]: Sent 29064396 bytes,"..., 58}, {"\n", 1}], 6) = 83<br>
rt_sigprocmask(SIG_UNBLOCK, [HUP ALRM], NULL, 8) = 0<br>select(1, [0], NULL, NULL, NULL) = 1 (in [0])<br><br>Now, <150>, according to syslog.h is "<a href="http://local2.info">local2.info</a>", which should go to messages because of the following line in /etc/syslog.conf:<br>
*.=info;*.=notice;*.=warn;\<br> auth,authpriv.none;\<br> cron,daemon.none;\<br> mail,news.none -/var/log/messages<br><br>Seems like I should trace it at daemon startup stage to see if it fails opening the file...<br>
<br> thanks<br><br><br></div></div><br></div>