[syslog-ng]Lost of facility/level
Jerome Peducasse
peducasse@echo.fr
Wed, 17 Apr 2002 10:34:14 +0200
--BOKacYhQ+x31HxR3
Content-Type: text/plain; charset=us-ascii
On Tue, Apr 16, 2002 at 01:47:39PM +0200, Balazs Scheidler wrote:
>
> I see, syslog-ng supports maximum 1024 long messages. You can raise this
> limit, by increasing a constant in syslog-ng.h and recompile.
>
>
> --
> Bazsi
>
I find another case which create error: a log message is concatenate with second part of previous message.
Apr 17 09:59:13 crawler2.crawl.fr.ke.echo [user.notice] root@crawler2.crawl.fr.ke.echo root@crawler2.crawl.fr.ke.echo:/usr/local/src/bind-8.2.2-P7/src/bin/named<28>Apr 17 09:59:13 named[1029]: limit files set to fdlimit (8192)
Attached file contains output of strace.
Thanks.
--
Jerome Peducasse
--BOKacYhQ+x31HxR3
Content-Type: text/plain; charset=us-ascii
Content-Disposition: attachment; filename=strace_syslogng
read(3, "<29>Apr 17 09:59:13 named[1029]: starting. named 8.2.2-P7 Wed Jul 11 10:49:47 CEST 2001\n\troot@crawler2.crawl.fr.ke.echo:/usr/local/src/bind-8.2.2-P7/src/bin/named", 2048) = 163
time(NULL) = 1019030353
time(NULL) = 1019030353
time(NULL) = 1019030353
poll([{fd=16, events=0}, {fd=15, events=0}, {fd=14, events=0}, {fd=13, events=0}, {fd=12, events=0}, {fd=11, events=0}, {fd=10, events=0}, {fd=9, events=POLLOUT, revents=POLLOUT}, {fd=4, events=0}, {fd=2, events=0}, {fd=5, events=0}, {fd=6, events=0}, {fd=1, events=0}, {fd=0, events=POLLOUT, revents=POLLOUT}, {fd=3, events=POLLIN}], 15, 100) = 2
write(9, "Apr 17 09:59:13 [daemon.notice] crawler2.crawl.fr.ke.echo named named[1029]: starting. named 8.2.2-P7 Wed Jul 11 10:49:47 CEST 2001\n", 133) = 133
fsync(9) = 0
write(0, "Apr 17 09:59:13 [daemon.notice] crawler2.crawl.fr.ke.echo named named[1029]: starting. named 8.2.2-P7 Wed Jul 11 10:49:47 CEST 2001\n", 133) = 133
time(NULL) = 1019030353
poll([{fd=16, events=0}, {fd=15, events=0}, {fd=14, events=0}, {fd=13, events=0}, {fd=12, events=0}, {fd=11, events=0}, {fd=10, events=0}, {fd=9, events=0}, {fd=4, events=0}, {fd=2, events=0}, {fd=5, events=0}, {fd=6, events=0}, {fd=1, events=0}, {fd=0, events=0}, {fd=3, events=POLLIN, revents=POLLIN}], 15, 100) = 1
read(3, "<28>Apr 17 09:59:13 named[1029]: limit files set to fdlimit (8192)", 1974) = 66
time(NULL) = 1019030353
time(NULL) = 1019030353
open("/var/log/ramasse-miettes/user.notice", O_WRONLY|O_NONBLOCK|O_APPEND|O_CREAT|O_NOCTTY, 0640) = 17
chown("/var/log/ramasse-miettes/user.notice", 0, 3) = 0
chmod("/var/log/ramasse-miettes/user.notice", 0640) = 0
fcntl(17, F_GETFL) = 0xc01 (flags O_WRONLY|O_NONBLOCK|O_APPEND)
fcntl(17, F_SETFL, O_WRONLY|O_NONBLOCK|O_APPEND) = 0
fcntl(17, F_SETFD, FD_CLOEXEC) = 0
time(NULL) = 1019030353
time(NULL) = 1019030353
time(NULL) = 1019030353
poll([{fd=17, events=POLLOUT, revents=POLLOUT}, {fd=16, events=0}, {fd=15, events=0}, {fd=14, events=0}, {fd=13, events=0}, {fd=12, events=0}, {fd=11, events=POLLOUT, revents=POLLOUT}, {fd=10, events=0}, {fd=9, events=0}, {fd=4, events=0}, {fd=2, events=0}, {fd=5, events=POLLOUT, revents=POLLOUT}, {fd=6, events=0}, {fd=1, events=0}, {fd=0, events=0}, {fd=3, events=POLLIN}], 16, 100) = 3
write(17, "Apr 17 09:59:13 [user.notice] crawler2.crawl.fr.ke.echo \troot@crawler2.crawl.fr.ke.echo \troot@crawler2.crawl.fr.ke.echo:/usr/local/src/bind-8.2.2-P7/src/bin/named<28>Apr 17 09:59:13 named[1029]: limit files set to fdlimit (8192)\n", 229) = 229
fsync(17) = 0
write(11, "Apr 17 09:59:13 [user.notice] crawler2.crawl.fr.ke.echo \troot@crawler2.crawl.fr.ke.echo \troot@crawler2.crawl.fr.ke.echo:/usr/local/src/bind-8.2.2-P7/src/bin/named<28>Apr 17 09:59:13 named[1029]: limit files set to fdlimit (8192)\n", 229) = 229
fsync(11) = 0
write(5, "<13>Apr 17 09:59:13 crawler2.crawl.fr.ke.echo \troot@crawler2.crawl.fr.ke.echo:/usr/local/src/bind-8.2.2-P7/src/bin/named<28>Apr 17 09:59:13 named[1029]: limit files set to fdlimit (8192)\n", 187) = 187
time(NULL) = 1019030353
--BOKacYhQ+x31HxR3--