[syslog-ng] Message length

[G. Rayot]

The file test.log is the input for logger:
$ logger -f test.log -p local6.info -t TEST

The result is given by the file local6.log
As you can see, the part : " log. hello this is the second "is missing (31
characters). The syslog header is 31 char long.

I've also post the result of the strace (strace.txt). The useful part seems
to be at line 119:
send(1, "<182>Jan  5 13:04:01 TESTSAP: Fi"..., 1053, MSG_NOSIGNAL) = 1053
time(NULL)                              = 1231157041
stat64("/etc/localtime", {st_mode=S_IFREG|0644, st_size=1920, ...}) = 0
send(1, "<182>Jan  5 13:04:01 TESTSAP: lo"..., 66, MSG_NOSIGNAL) = 66
read(0, "", 4096)                       = 0
close(1)                                = 0


Thanks.
G.


2009/1/5 Geller, Sandor (IT) <Sandor.Geller at morganstanley.com>

> Hi,
>
> > Using logger command, I'm trying to send long messages to
> > syslog-ng. I'm aware that messages cannot be too long (UDP
> > limitation). The problem is that logger doesn't just cut my
> > log, it also remove some part of the log replacing it with
> > the syslog header. Needless to say, this information is
> > crucial to me.
>
> Well, UDP itself allows to send data up to 64k, as IP itself
> handles fragmentation/ reassembling. What kind of messages
> are you trying to log? logger shouldn't replace anything. It
> simply uses openlog and syslog under the hood, so the log
> gets prepended by the facility/severity information and the
> timestamp.
>
> Did you straced logger?
>
> Regards,
>
> Sandor
> --------------------------------------------------------
>
> NOTICE: If received in error, please destroy and notify sender. Sender does
> not intend to waive confidentiality or privilege. Use of this email is
> prohibited when received in error.
>
> ______________________________________________________________________________
> Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng
> Documentation:
> http://www.balabit.com/support/documentation/?product=syslog-ng
> FAQ: http://www.campin.net/syslog-ng/faq.html
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.balabit.hu/pipermail/syslog-ng/attachments/20090105/10a6eeba/attachment.htm 
-------------- next part --------------
A non-text attachment was scrubbed...
Name: test.log
Type: application/octet-stream
Size: 1059 bytes
Desc: not available
Url : http://lists.balabit.hu/pipermail/syslog-ng/attachments/20090105/10a6eeba/attachment.obj 
-------------- next part --------------
An embedded and charset-unspecified text was scrubbed...
Name: strace.txt
Url: http://lists.balabit.hu/pipermail/syslog-ng/attachments/20090105/10a6eeba/attachment.txt 
-------------- next part --------------
A non-text attachment was scrubbed...
Name: local6.log
Type: application/octet-stream
Size: 1093 bytes
Desc: not available
Url : http://lists.balabit.hu/pipermail/syslog-ng/attachments/20090105/10a6eeba/attachment-0001.obj