Syslog-ng weirdness on 9.1-RELEASE

[Peter Czanik]

Hello,

Mark Saad <nonesuch <at> longcount.org> writes:

 >
 > All
 >  I am wondering if anyone has seen this. I pulled down the 9.1-RELEASE
 > install media and did a clean install . After installing some ports from
 > the packages on
 > ftp://ftp.freebsd.org/pub/FreeBSD/ports/amd64/packages-9-stable
 >
 > I noticed that syslog-ng is spinning out of control with a stock config.
 >
 > ps shows I have two syslog-ng pids

That is normal, one is the supervisor, the other one does the actual 
logging part: http://www.balabit.com/wiki/syslog-ng-faq-supervisor

 > the lower numbed pid is idle and the higher numbed pid is spinning out of
 > control

As it turned out, 3.3.6 was buggy on FreeBSD when reading kernel 
messages (the bundled ivykis library was changed from the BalaBit 
maintained fork to upstream). You should use 3.3.7 from ports and read 
the related entry from /usr/ports/UPDATING

Bye,
CzP