<p dir="ltr">We get various data points on the process connecting via /dev/log via recvmsg() that returns this in an aux buffer, statically sized to 1024.</p>
<p dir="ltr">It's interesting that you have more. If you can reproduce it, can you strace syslog-ng to see what is coming aux data?</p>
<p dir="ltr">This can be resized but that needs a recompilation.</p>
<div class="gmail_quote">On Jul 6, 2016 11:18 PM, "Noémi Ványi" <<a href="mailto:sitbackandwait@gmail.com">sitbackandwait@gmail.com</a>> wrote:<br type="attribution"><blockquote class="quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr"><div>Hi!<br><br></div>It seems to me that aux buffer size is a hard-coded value. So it cannot be configured using the config file.<br>I guess the size could be increased, but I am curious what the devs of syslog-ng would say. :)<br></div><div class="elided-text"><div class="gmail_extra"><br><div class="gmail_quote">On 6 July 2016 at 22:09, Evan Rempel <span dir="ltr"><<a href="mailto:erempel@uvic.ca" target="_blank">erempel@uvic.ca</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">I got this log line out of syslog-ng, but I'm not sure what it really means.<br>
<br>
Can anyone shed some slight on it and let me know how I can increase the<br>
aux buffer size?<br>
<br>
syslog-ng[29712]: Transport aux data overflow, some fields may not be<br>
associated with the message, please increase aux buffer size;<br>
aux_size='1024'<br>
______________________________________________________________________________<br>
Member info: <a href="https://lists.balabit.hu/mailman/listinfo/syslog-ng" rel="noreferrer" target="_blank">https://lists.balabit.hu/mailman/listinfo/syslog-ng</a><br>
Documentation: <a href="http://www.balabit.com/support/documentation/?product=syslog-ng" rel="noreferrer" target="_blank">http://www.balabit.com/support/documentation/?product=syslog-ng</a><br>
FAQ: <a href="http://www.balabit.com/wiki/syslog-ng-faq" rel="noreferrer" target="_blank">http://www.balabit.com/wiki/syslog-ng-faq</a><br>
<br>
</blockquote></div><br></div>
</div><br>______________________________________________________________________________<br>
Member info: <a href="https://lists.balabit.hu/mailman/listinfo/syslog-ng" rel="noreferrer" target="_blank">https://lists.balabit.hu/mailman/listinfo/syslog-ng</a><br>
Documentation: <a href="http://www.balabit.com/support/documentation/?product=syslog-ng" rel="noreferrer" target="_blank">http://www.balabit.com/support/documentation/?product=syslog-ng</a><br>
FAQ: <a href="http://www.balabit.com/wiki/syslog-ng-faq" rel="noreferrer" target="_blank">http://www.balabit.com/wiki/syslog-ng-faq</a><br>
<br>
<br></blockquote></div>