[syslog-ng] Solaris 10: Insufficient buffer space for retrieving STREAMS log message

[Balazs Scheidler]

On Tue, 2007-12-18 at 09:13 +0000, AndyH at nominet.org.uk wrote:

> > Or better yet, can you check if this patch solves it:
> >
> >
> > diff --git a/src/afstreams.c b/src/afstreams.c
> > index 981b88e..009b074 100644
> > --- a/src/afstreams.c
> > +++ b/src/afstreams.c
> > @@ -134,7 +134,7 @@ afstreams_sd_init(LogPipe *s, GlobalConfig *cfg,
> > PersistentConfig *persist)
> >            close(fd);
> >            return FALSE;
> >          }
> > -      self->reader = log_reader_new(streams_read_new(fd), LR_LOCAL
> > | LR_NOMREAD, s, &self->reader_options);
> > +      self->reader = log_reader_new(streams_read_new(fd), LR_LOCAL
> > | LR_NOMREAD | LR_PKTTERM, s, &self->reader_options);
> >        log_pipe_append(self->reader, s);
> >
> >        if (self->door_filename)
> 
> I re-compiled with this patch and it's still working now.  If there's any
> change I'll report back again.
> 

This change assumes that the kernel gives us complete log entries for
every invocation. I'm not sure if that assumption is true, though.

Please watch for concatenated log entries (e.g. when a single log line
in the output file contains multiple entries).

-- 
Bazsi