Re: [squid-users] Log file size limit

List, out of curiosity, what are the steps squid
does when we issue a "squid -k rotate"?

My guess:
1) renames files acording to some standard
2) stops listening to the incoming traffic
3) closes the old file
4) creates the new log file
5) starts listening to the incoming traffic

And how many time is spent in that process?
The size of the log file or memory cache
does mean a difference in time spent on
log rotating?

Many thanks!

-- 
Bye,
Fernando Maciel Souto Maior
fernando@araujo.com.br
http://www.araujo.com.br
+55+31 3270-5886
LPIC-1!31908
> It is a new thread, in fact.
>
> D.J.Bernstein (cr.yp.to, creator of qmail) have an
> utility that is shipped with daemontools, called
> multilog (former known as cyclog).
>
> That utility reads stdin, can do some filtering and
> can do log cycling based on log file size.
>
> May be there is a way to use it with squid. Or may
> be squid can have that in the code some day in the
> future.
>
> --
> Bye,
> Fernando Maciel Souto Maior
> fernando@araujo.com.br
> http://www.araujo.com.br
> +55+31 3270-5886
> LPIC-1!31908
>
>> I do.. there is many situations where this is required.
>>
>> Several of the places I have been have as policy that proxy logs needs
>> to
>> be archived for a minimum of 6 months, with at least the last month kept
>> online for fast searches if/when a abuse or security situation needs to
>> be
>> investigated.
>>
>> Some of these had rather large bandwidth, generating several GB of logs
>> per day. Thankfully access logs can be compressed a lot making the long
>> term archival not that cumbersome.
>>
>> Thankfully the place I was most involved with ran Squid on 64 bit
>> hardware
>> (Alpha), making the log file size a non-issue other than pure storage.
>> Others have selected to rotate their logs on a hourly basis to keep the
>> size down well below the magic 2GB.
>