[syslog-ng] Apache 2 + logger + syslog-ng

[Doyon, Jean-Francois]

Wow, thanks a bunch, that was very helpful!

For the list archives:

"logger" truncates messages to 400 bytes!

The C source is very simple though, so I just modified some numbers to allow
for messages of up to 2048 bytes, to match syslog-ng's default.

Works like a charm now.

Thanks again,
J.F. 

-----Original Message-----
From: syslog-ng-bounces at lists.balabit.hu
[mailto:syslog-ng-bounces at lists.balabit.hu] On Behalf Of Balazs Scheidler
Sent: April 12, 2006 4:44 AM
To: Syslog-ng users' and developers' mailing list
Subject: RE: [syslog-ng] Apache 2 + logger + syslog-ng

On Tue, 2006-04-11 at 09:50 -0400, Doyon, Jean-Francois wrote:
> Sorry,
> 
> Here's the system information:
> 
> syslog-ng 1.6.9 built from source (on both ends) CentOS/RHEL 4.3 (on 
> both ends) Apache 2.2 built from source as well /usr/bin/logger from 
> package util-linux-2.12a-16.EL4.12

I've just tried to send a 5000 byte message to syslog-ng and it correctly
wrote MSGONLY to the file. Tried the same using logger and it did not work:

write(3, "<5>Apr 12 10:42:22 <someone>: xx"..., 431) = 431
readlink("/proc/self/fd/0", "pipe:[69597]", 511) = 12 ioctl(0,
SNDCTL_TMR_TIMEBASE or TCGETS, 0xbfffe878) = -1 EINVAL (Invalid argument)
time([1144831342])                      = 1144831342
write(3, "<5>Apr 12 10:42:22 <someone>: xx"..., 431) = 431
readlink("/proc/self/fd/0", "pipe:[69597]", 511) = 12 ioctl(0,
SNDCTL_TMR_TIMEBASE or TCGETS, 0xbfffe878) = -1 EINVAL (Invalid argument)
time([1144831342])                      = 1144831342
write(3, "<5>Apr 12 10:42:22 <someone>: xx"..., 431) = 431
readlink("/proc/self/fd/0", "pipe:[69597]", 511) = 12 ioctl(0,
SNDCTL_TMR_TIMEBASE or TCGETS, 0xbfffe878) = -1 EINVAL (Invalid argument)
time([1144831342])                      = 1144831342
write(3, "<5>Apr 12 10:42:22 <someone>: xx"..., 431) = 431 read(0,
"xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx"..., 4096) = 905
readlink("/proc/self/fd/0", "pipe:[69597]", 511) = 12 ioctl(0,
SNDCTL_TMR_TIMEBASE or TCGETS, 0xbfffe878) = -1 EINVAL (Invalid argument)
time([1144831342])                      = 1144831342
write(3, "<5>Apr 12 10:42:22 <someone>: xx"..., 431) = 431

strace shows that logger writes 431 bytes to syslog-ng, so the problem is in
logger.

--
Bazsi

_______________________________________________
syslog-ng maillist  -  syslog-ng at lists.balabit.hu
https://lists.balabit.hu/mailman/listinfo/syslog-ng
Frequently asked questions at http://www.campin.net/syslog-ng/faq.html