about syslog unknow error！

[oven]

system：CENTOS 5.5
mysql：5.0.77
故障现象：用cacti的syslog插件，将设备的log日志传入cacati中，发现系统重启后工作正常，但是过了一段时间发现日志无法更新，检查mysql的processlist发现有一个root进程莫名其妙的消失了
mysql> show processlist;
+-----+-----------+-----------+--------+---------+------+-------+------------------+
| Id | User | Host | db | Command | Time | State | Info |
+-----+-----------+-----------+--------+---------+------+-------+------------------+
| 2 | root | localhost | syslog | Sleep | 0 | | NULL |
| 107 | cactiuser | localhost | syslog | Sleep | 45 | | NULL |
| 108 | cactiuser | localhost | syslog | Sleep | 16 | | NULL |
| 109 | cactiuser | localhost | syslog | Sleep | 55 | | NULL |
| 123 | root | localhost | NULL | Query | 0 | NULL | show processlist |
| 124 | cactiuser | localhost | syslog | Sleep | 43 | | NULL |
| 138 | cactiuser | localhost | syslog | Sleep | 39 | | NULL |
| 139 | cactiuser | localhost | syslog | Sleep | 23 | | NULL |
| 158 | cactiuser | localhost | syslog | Sleep | 47 | | NULL |
| 176 | cactiuser | localhost | syslog | Sleep | 28 | | NULL |
| 463 | cactiuser | localhost | syslog | Sleep | 30 | | NULL |
| 464 | cactiuser | localhost | syslog | Sleep | 51 | | NULL |
| 465 | cactiuser | localhost | syslog | Sleep | 58 | | NULL |
| 466 | cactiuser | localhost | syslog | Sleep | 34 | | NULL |
| 467 | cactiuser | localhost | syslog | Sleep | 26 | | NULL |
| 468 | cactiuser | localhost | syslog | Sleep | 31 | | NULL |
| 469 | cactiuser | localhost | syslog | Sleep | 37 | | NULL |
+-----+-----------+-----------+--------+---------+------+-------+------------------+
17 rows in set (0.00 sec)这段是正常的。

+-----+-----------+-----------+--------+---------+------+----------------+------------------------------------------------------------------------------------------------------+
| 2 | root | localhost | syslog | Query | 0 | Writing to net | INSERT INTO syslog_incoming (host, facility, priority, date, time, message) VALUES ( 'cacti_app', 'k |
| 107 | cactiuser | localhost | syslog | Sleep | 598 | | NULL |
| 108 | cactiuser | localhost | syslog | Sleep | 37 | | NULL |
| 109 | cactiuser | localhost | syslog | Sleep | 78 | | NULL |
| 123 | root | localhost | NULL | Query | 0 | NULL | show processlist |
| 124 | cactiuser | localhost | syslog | Sleep | 452 | | NULL |
| 138 | cactiuser | localhost | syslog | Sleep | 618 | | NULL |
| 139 | cactiuser | localhost | syslog | Sleep | 17 | | NULL |
| 158 | cactiuser | localhost | syslog | Sleep | 327 | | NULL |
| 176 | cactiuser | localhost | syslog | Sleep | 952 | | NULL |
| 463 | cactiuser | localhost | syslog | Sleep | 932 | | NULL |
| 464 | cactiuser | localhost | syslog | Sleep | 98 | | NULL |
| 465 | cactiuser | localhost | syslog | Sleep | 57 | | NULL |
| 466 | cactiuser | localhost | syslog | Sleep | 638 | | NULL |
| 467 | cactiuser | localhost | syslog | Sleep | 912 | | NULL |
| 468 | cactiuser | localhost | syslog | Sleep | 751 | | NULL |
| 469 | cactiuser | localhost | syslog | Sleep | 661 | | NULL |
+-----+-----------+-----------+--------+---------+------+----------------+------------------------------------------------------------------------------------------------------+
17 rows in set (0.00 sec)这段也是正常的root进程在往syslog数据库插数据

mysql> show processlist;
+-----+-----------+-----------+--------+---------+------+-------+------------------+
| Id | User | Host | db | Command | Time | State | Info |
+-----+-----------+-----------+--------+---------+------+-------+------------------+
| 107 | cactiuser | localhost | syslog | Sleep | 270 | | NULL |
| 108 | cactiuser | localhost | syslog | Sleep | 250 | | NULL |
| 109 | cactiuser | localhost | syslog | Sleep | 7 | | NULL |
| 123 | root | localhost | NULL | Query | 0 | NULL | show processlist |
| 124 | cactiuser | localhost | syslog | Sleep | 8 | | NULL |
| 138 | cactiuser | localhost | syslog | Sleep | 94 | | NULL |
| 139 | cactiuser | localhost | syslog | Sleep | 334 | | NULL |
| 158 | cactiuser | localhost | syslog | Sleep | 229 | | NULL |
| 176 | cactiuser | localhost | syslog | Sleep | 182 | | NULL |
| 463 | cactiuser | localhost | syslog | Sleep | 205 | | NULL |
| 464 | cactiuser | localhost | syslog | Sleep | 375 | | NULL |
| 465 | cactiuser | localhost | syslog | Sleep | 9 | | NULL |
| 466 | cactiuser | localhost | syslog | Sleep | 16 | | NULL |
| 467 | cactiuser | localhost | syslog | Sleep | 354 | | NULL |
| 468 | cactiuser | localhost | syslog | Sleep | 158 | | NULL |
| 469 | cactiuser | localhost | syslog | Sleep | 114 | | NULL |
+-----+-----------+-----------+--------+---------+------+-------+------------------+
16 rows in set (0.00 sec)Id是 2 root 进程消失了

崩溃中谢谢大家给个处理的思路谢谢

[gandalf]

It is recommended to post questions in plain english.
R.

[oven]

i know why the cacti syslong can't working !
if you installed webmin ,it have a cron for system /etc/webmin/bandwidth/rotate.pl .this process will run every 1 hours and it's writer /var/syslog .when this process is writeing，the cacti syslong is down。

懂中文的进：
http://bbs.chinaunix.net/viewthread.php?tid=1769122