The file test.log is the input for logger:
$ logger -f test.log -p local6.info -t TEST

The result is given by the file local6.log
As you can see, the part : " log. hello this is the second "is missing (31 characters). The syslog header is 31 char long.

I've also post the result of the strace (strace.txt). The useful part seems to be at line 119:
send(1, "<182>Jan  5 13:04:01 TESTSAP: Fi"..., 1053, MSG_NOSIGNAL) = 1053
time(NULL)                              = 1231157041
stat64("/etc/localtime", {st_mode=S_IFREG|0644, st_size=1920, ...}) = 0
send(1, "<182>Jan  5 13:04:01 TESTSAP: lo"..., 66, MSG_NOSIGNAL) = 66
read(0, "", 4096)                       = 0
close(1)                                = 0


Thanks.
G.


2009/1/5 Geller, Sandor (IT) <Sandor.Geller@morganstanley.com>
Hi,

> Using logger command, I'm trying to send long messages to
> syslog-ng. I'm aware that messages cannot be too long (UDP
> limitation). The problem is that logger doesn't just cut my
> log, it also remove some part of the log replacing it with
> the syslog header. Needless to say, this information is
> crucial to me.

Well, UDP itself allows to send data up to 64k, as IP itself
handles fragmentation/ reassembling. What kind of messages
are you trying to log? logger shouldn't replace anything. It
simply uses openlog and syslog under the hood, so the log
gets prepended by the facility/severity information and the
timestamp.

Did you straced logger?

Regards,

Sandor
--------------------------------------------------------

NOTICE: If received in error, please destroy and notify sender. Sender does not intend to waive confidentiality or privilege. Use of this email is prohibited when received in error.
______________________________________________________________________________
Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng
Documentation: http://www.balabit.com/support/documentation/?product=syslog-ng
FAQ: http://www.campin.net/syslog-ng/faq.html