Re: [Fail2ban-users] Log Rotation Detection and High CPU Overhead

[Yaroslav H. <li...@on...>]

> Some tests I run to show time sync below. Both the titan and saturn 
> servers are running an NTP daemon, syncing to the RedHat NTP pool and 
> each other.
> A few minutes later... the hardware clock gains 37s but the maillog is 
> still in sync with system time:

so... is the divergence growing wildly within time?
I am yet to look in the code to see where exactly that might
matter...

After such time reset is fail2ban operating ok for a while or starts
puking the same log rotation messages?

> [root@titan mail]# /sbin/hwclock --show ; date ; echo "test" | mail -s 
> "test" dd...@dd...
> Fri 07 Sep 2007 11:17:15 AM PDT  -0.343120 seconds
> Fri Sep  7 11:16:52 PDT 2007

> Sep  7 11:16:52 titan sendmail[3366]: l87IGqrq003366: from=root, 
> size=40, class=0, nrcpts=1, 
> msgid=<200...@ti...>, 
> relay=root@localhost
-- 
                                  .-.
=------------------------------   /v\  ----------------------------=
Keep in touch                    // \\     (yoh@|www.)onerussian.com
Yaroslav Halchenko              /(   )\               ICQ#: 60653192
                   Linux User    ^^-^^    [175555]