[syslog-ng]Lost of facility/level

Balazs Scheidler bazsi@balabit.hu
Wed, 17 Apr 2002 10:52:50 +0200


On Wed, Apr 17, 2002 at 10:34:14AM +0200, Jerome Peducasse wrote:
> On Tue, Apr 16, 2002 at 01:47:39PM +0200, Balazs Scheidler wrote:
> > 
> > I see, syslog-ng supports maximum 1024 long messages. You can raise this
> > limit, by increasing a constant in syslog-ng.h and recompile.
> > 
> > 
> > -- 
> > Bazsi
> > 
> 
> I find another case which create error: a log message is concatenate with second part of previous message.
> 
> Apr 17 09:59:13 crawler2.crawl.fr.ke.echo [user.notice]         root@crawler2.crawl.fr.ke.echo  root@crawler2.crawl.fr.ke.echo:/usr/local/src/bind-8.2.2-P7/src/bin/named<28>Apr 17 09:59:13 named[1029]: limit files set to fdlimit (8192)

there's a newline in the log message, which terminates a message.

> read(3, "<29>Apr 17 09:59:13 named[1029]: starting.  named 8.2.2-P7 Wed Jul 11 10:49:47 CEST 2001\n\troot@crawler2.crawl.fr.ke.echo:/usr/local/src/bind-8.2.2-P7/src/bin/named", 2048) = 163
                                                                                                   ^^^^^
-- 
Bazsi
PGP info: KeyID 9AF8D0A9 Fingerprint CD27 CFB0 802C 0944 9CFD 804E C82C 8EB1