Instead of using close(3), can you try using closelog();
This should resolve the issue and get the expected results.

Regards,
Andy

> Hello
> 
> Test code:
> int main(int argc, char **argv, char **envp)
> {
>         openlog("zzz", LOG_PID | LOG_NDELAY, LOG_DAEMON);
>         syslog(LOG_NOTICE, "zzz1");
>         close(3); // close /dev/log fd
>         openlog("zzz", LOG_PID | LOG_NDELAY, LOG_DAEMON);
>         syslog(LOG_NOTICE, "zzz2");
>         return (EXIT_SUCCESS);
> }
> 
> Actual results:
> Jul 16 11:03:01 nto zzz[607952922-1]: zzz1
> 
> Expected results:
> Jul 16 11:03:01 nto zzz[607952922-1]: zzz1
> Jul 16 11:03:01 nto zzz[607952922-1]: zzz2
> 
> is it bug or feature?