note
shockme
<div class="pmsig"><div class="pmsig-111056">
Following the move, whatever service is writing to the file will need to be restarted as well, for example:
<code>
system("/etc/init.d/syslog restart") == 0 or ...
</code>
I've seen situations where the application would continue writing to the old file until the service was restarted. Odd but true, and it might explain some of what you're seeing.
<P>
If you can, check /etc/logrotate.conf or any of the files in /etc/logrotate.d, and you'll probably see where certain services are being restarted following the rotation.
<P>
<I>If things get any worse, I'll have to ask you to stop helping me.</I>
</div></div>
306936
306936