-=| Damyan Ivanov, 15.11.2013 12:22:04 +0200 |=- > It is indeed zapped and re-written daily, but for some reason since > about three weeks ago the file gets bigger every day.
I have found the core reason. A badly written logrotate stanza causes logrotate to process more and more files every day. Just have a stanza ending in * like "/var/log/syslog*" and in a couple of weeks there will be numerous /var/log/syslog.1.gz.2.gz.1.gz etc files which logrotate will rotate again and again. The sheer amount of logrotate processes seems to make atop grow its accounting file. While the root cause is not in atop, perhaps the accounting file should not be in /run if it is supposed to be able to grow indefinitely.
signature.asc
Description: Digital signature