Wow, thanks a bunch, that was very helpful! For the list archives: "logger" truncates messages to 400 bytes! The C source is very simple though, so I just modified some numbers to allow for messages of up to 2048 bytes, to match syslog-ng's default. Works like a charm now. Thanks again, J.F. -----Original Message----- From: syslog-ng-bounces@lists.balabit.hu [mailto:syslog-ng-bounces@lists.balabit.hu] On Behalf Of Balazs Scheidler Sent: April 12, 2006 4:44 AM To: Syslog-ng users' and developers' mailing list Subject: RE: [syslog-ng] Apache 2 + logger + syslog-ng On Tue, 2006-04-11 at 09:50 -0400, Doyon, Jean-Francois wrote:
Sorry,
Here's the system information:
syslog-ng 1.6.9 built from source (on both ends) CentOS/RHEL 4.3 (on both ends) Apache 2.2 built from source as well /usr/bin/logger from package util-linux-2.12a-16.EL4.12
I've just tried to send a 5000 byte message to syslog-ng and it correctly wrote MSGONLY to the file. Tried the same using logger and it did not work: write(3, "<5>Apr 12 10:42:22 <someone>: xx"..., 431) = 431 readlink("/proc/self/fd/0", "pipe:[69597]", 511) = 12 ioctl(0, SNDCTL_TMR_TIMEBASE or TCGETS, 0xbfffe878) = -1 EINVAL (Invalid argument) time([1144831342]) = 1144831342 write(3, "<5>Apr 12 10:42:22 <someone>: xx"..., 431) = 431 readlink("/proc/self/fd/0", "pipe:[69597]", 511) = 12 ioctl(0, SNDCTL_TMR_TIMEBASE or TCGETS, 0xbfffe878) = -1 EINVAL (Invalid argument) time([1144831342]) = 1144831342 write(3, "<5>Apr 12 10:42:22 <someone>: xx"..., 431) = 431 readlink("/proc/self/fd/0", "pipe:[69597]", 511) = 12 ioctl(0, SNDCTL_TMR_TIMEBASE or TCGETS, 0xbfffe878) = -1 EINVAL (Invalid argument) time([1144831342]) = 1144831342 write(3, "<5>Apr 12 10:42:22 <someone>: xx"..., 431) = 431 read(0, "xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx"..., 4096) = 905 readlink("/proc/self/fd/0", "pipe:[69597]", 511) = 12 ioctl(0, SNDCTL_TMR_TIMEBASE or TCGETS, 0xbfffe878) = -1 EINVAL (Invalid argument) time([1144831342]) = 1144831342 write(3, "<5>Apr 12 10:42:22 <someone>: xx"..., 431) = 431 strace shows that logger writes 431 bytes to syslog-ng, so the problem is in logger. -- Bazsi _______________________________________________ syslog-ng maillist - syslog-ng@lists.balabit.hu https://lists.balabit.hu/mailman/listinfo/syslog-ng Frequently asked questions at http://www.campin.net/syslog-ng/faq.html