[syslog-ng] cisco tcp syslog weirdness/merkwuerdigkeit

Balazs Scheidler bazsi at balabit.hu
Wed Aug 22 09:38:47 CEST 2007


On Mon, 2007-08-20 at 17:12 -0400, Blurry wrote:
> When a certain cisco router is set to UPD syslog delivery it creates a
> unique message for each unique message, duh ! But when this same
> router is set to TCP syslog, it takes all messages and tacks them back
> to back until syslog-ng runs out of buffer space in one line. I kept
> increasing the message log size, but the real problem is that the
> messages would have to be parsed out of this massive long line. My
> router guy says he can't make the cisco router behave any differently.
> How do I handle this problem ? Ideas ?

Is there any kind of line separator? Can you post a tcpdump or something
similar that shows what is sent by the router?

Thanks.

-- 
Bazsi



More information about the syslog-ng mailing list