feeding log-messages (Re: machine hangs on occasion - correlated with ssh break-in attempts)

[Mikhail Teterin]

David Wolfskill написав(ла):
> While the amount of work involved was assuredly greater in that case 
> than in yours, those of us who were actually building and running the 
> relays in question were very unsurprised when Postfix performance 
> improved significantly following a redesign of the application, so 
> that /var/log/maillog was written by syslogd(8) and the Perl script 
> was effectively fed via "tail -F".
In my setup, syslogd does both -- append the message to the appropriate 
log-file (in this case -- /var/log/auth.log) and feed it to the script's 
stdin. From syslogd.conf:

    auth.info;authpriv.info                         /var/log/auth.log
    auth.info;authpriv.info                        
    |/opt/sbin/auth-log-watch

"tail -F" seems just wrong :-)

    -mi