[syslog-ng]Problem with 1.6.3 on Solaris. Message

Dmitri Smirnov syslog-ng@lists.balabit.hu
Thu, 13 May 2004 00:35:21 -0700


Looks like version 1.6.3 is not working well on Solaris 8.=20

Few minutes after the start it generates hundreds of messages like:
syslog.err syslog-ng[27013]: do_stream_read: STREAMS device gave too
long line

I think it is the result of changes related to HP-UX and pad_size (from
10k to 256 bytes ?)

Another problem with syslog-ng in general (1.6.1 or later) - we're
started to lose about 10% of syslog messages.
The config file is not too big and messages do arrive on server for sure
(confirmed with snoop) but every few minutes=20
syslog-ng is losing some of them. Any recommendation on tuning or
troubleshooting?

Dmitri