[dnstap] Knot+Dnstap how to read log in realtime?

[Evan Hunt]

On Wed, Jan 04, 2017 at 07:01:34PM +0300, purri wrote:
> I tried to use knot-2.3.3 with dnstap
> 
> hen i use "sink: /tmp/capture.tap" I ran into a problem that capture.tap 
> updates only every 4096 bytes
> 
> I also tried this command to create socket:
> "fstrm_capture -t protobuf:dnstap.Dnstap -u /tmp/dnstap.sock -w 
> /tmp/capture.tap -ddddd"
> with "sink: /tmp/dnstap.sock" but here capture.tap never filled,
> I restarted knotd , but looks like it not even connect to this sock.

I remember submitting a change to Robert so that a SIGHUP to
fstrm_capture would cause it to flush its output immediately. I'm
not sure whether he ever accepted the patch though.

--
Evan Hunt -- each at isc.org
Internet Systems Consortium, Inc.