After a suggestion from Peter Zijlstra, I checked what processes actually had /proc/kmgs open --- in my case both klogd's dd and rsyslogd were reading from the file.
I suggest to anyone who's having this problem that you do fuser /proc/kmsg as root, and check that only the dd from klogd is attempting to read the file. -- Dr Peter Chubb http://www.gelato.unsw.edu.au peterc AT gelato.unsw.edu.au http://www.ertos.nicta.com.au ERTOS within National ICT Australia -- To UNSUBSCRIBE, email to [email protected] with a subject of "unsubscribe". Trouble? Contact [email protected]

