[syslog-ng] Transport aux data overflow

[Scheidler, Balázs]

We get various data points on the process connecting via /dev/log via
recvmsg() that returns this in an aux buffer, statically sized to 1024.

It's interesting that you have more. If you can reproduce it, can you
strace syslog-ng to see what is coming aux data?

This can be resized but that needs a recompilation.
On Jul 6, 2016 11:18 PM, "Noémi Ványi" <sitbackandwait at gmail.com> wrote:

Hi!

It seems to me that aux buffer size is a hard-coded value. So it cannot be
configured using the config file.
I guess the size could be increased, but I am curious what the devs of
syslog-ng would say. :)

On 6 July 2016 at 22:09, Evan Rempel <erempel at uvic.ca> wrote:

> I got this log line out of syslog-ng, but I'm not sure what it really
> means.
>
> Can anyone shed some slight on it and let me know how I can increase the
> aux buffer size?
>
> syslog-ng[29712]: Transport aux data overflow, some fields may not be
> associated with the message, please increase aux buffer size;
> aux_size='1024'
>
> ______________________________________________________________________________
> Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng
> Documentation:
> http://www.balabit.com/support/documentation/?product=syslog-ng
> FAQ: http://www.balabit.com/wiki/syslog-ng-faq
>
>

______________________________________________________________________________
Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng
Documentation:
http://www.balabit.com/support/documentation/?product=syslog-ng
FAQ: http://www.balabit.com/wiki/syslog-ng-faq
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.balabit.hu/pipermail/syslog-ng/attachments/20160707/603b913f/attachment.htm