22 Aug
2007
22 Aug
'07
8:38 a.m.
On Mon, 2007-08-20 at 17:12 -0400, Blurry wrote:
When a certain cisco router is set to UPD syslog delivery it creates a unique message for each unique message, duh ! But when this same router is set to TCP syslog, it takes all messages and tacks them back to back until syslog-ng runs out of buffer space in one line. I kept increasing the message log size, but the real problem is that the messages would have to be parsed out of this massive long line. My router guy says he can't make the cisco router behave any differently. How do I handle this problem ? Ideas ?
Is there any kind of line separator? Can you post a tcpdump or something similar that shows what is sent by the router? Thanks. -- Bazsi