[syslog-ng] error sending raw frame

[James B Horwath]

I recently upgraded to syslog-ng  2.0.4 running on a Red Hat AS release 4. 
   I have the following on the system:

eventlog-0.2.5-1.i386.rpm
eventlog-devel-0.2.5-1.i386.rpm
libnet-devel-1.1.2.1-6.i386.rpm
syslog-ng-2.0.4-1.i386.rpm


When I fire up syslog-ng I receive a large number of the following:

Aug 30 14:36:07:2007 syslogger1 syslog-ng[31079]: Error sending raw frame; 
error=\'libnet_write_raw_ipv4(): -1 bytes written (Message too 
long)\\x0a\'
Aug 30 14:36:07:2007 syslogger1 syslog-ng[31079]: Error sending raw frame; 
error=\'libnet_write_raw_ipv4(): -1 bytes written (Message too 
long)\\x0a\'
Aug 30 14:36:07:2007 syslogger1 syslog-ng[31079]: Error sending raw frame; 
error=\'libnet_write_raw_ipv4(): -1 bytes written (Message too 
long)\\x0a\'


I am trying to forward packets onto another log product, so I have 
spoof_source(yes) specified.  What is the remedy for this error, am I 
loosing data?

Please advise,
Jim




-----------------------------------------
This message, and any attachments to it, may contain information
that is privileged, confidential, and exempt from disclosure under
applicable law.  If the reader of this message is not the intended
recipient, you are notified that any use, dissemination,
distribution, copying, or communication of this message is strictly
prohibited.  If you have received this message in error, please
notify the sender immediately by return e-mail and delete the
message and any attachments.  Thank you.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.balabit.hu/pipermail/syslog-ng/attachments/20070830/dea05fda/attachment.htm