Fwd: (RADIATOR) Incomplete entries in syslog

[Mike McCauley]

Hello Jan,

We have tested a number of platforms here and dont see the behaviour you 
report.

We see that all platforms truncate the syslog message at about 1024 bytes 
(this seems to happen in the syslog daemon, not the Syslog.pm client), but 
none of them run multiple syslog lines together, even if they are truncated.
The Solaris 9  syslogger prints embedded newlines as '\n', buts thats the only 
wierdness we saw. 

We certainly never saw logging to the wrong facility, however there was a 
recent patch that fixed a problem where multiple Log SYSLOG clauses with 
different Facility parameters could cause logging to the wrong facility.

I understand this is on Debian Woody (which we did not test)? What version of 
perl?

Cheers.

On Friday 03 September 2004 18:01, Jan Tomasek wrote:
> Hello Mike,
>
> > So... is our patch working OK?
>
> I've bad news for you. It's working just partialy. Lots of messages ends
> where they belongs too, but few are still corupted and delivered with wrong
> facility. This time it looks like they might be too big for syslog-ng...
> but I never before was experinced something things like this. Did you? Or
> were mention it just as guess? If you think so, I can try to stress
> syslog-ng with some huge text blocks.
>
> I attached two files. In grep.messages.2004_09_01.log.bz2 are few examples
> of corrupted messages. In radiator-file.bz2 are all uncorupted messages.
> I'm able to reproduce this when I do intensive testing of PEAP-MSCHAPv2 or
> similar method which causes big exchange of radius packets.
>
> I will be thankfull for any ideas from you
> --
> --------------------------------------------------------------
> Jan Tomasek aka Semik           work: CESNET, z.s.p.o.
> http://www.tomasek.cz/                Zikova 4, 160 00 Praha 6
>                                       Czech Republic
> phone(work): +420 2 2435 5279         http://www.cesnet.cz/

-- 
Mike McCauley                               mikem at open.com.au
Open System Consultants Pty. Ltd            Unix, Perl, Motif, C++, WWW
9 Bulbul Place Currumbin Waters QLD 4223 Australia   http://www.open.com.au
Phone +61 7 5598-7474                       Fax   +61 7 5598-7070

Radiator: the most portable, flexible and configurable RADIUS server 
anywhere. SQL, proxy, DBM, files, LDAP, NIS+, password, NT, Emerald, 
Platypus, Freeside, TACACS+, PAM, external, Active Directory, EAP, TLS, 
TTLS, PEAP etc on Unix, Windows, MacOS etc.

--
Archive at http://www.open.com.au/archives/radiator/
Announcements on radiator-announce at open.com.au
To unsubscribe, email 'majordomo at open.com.au' with
'unsubscribe radiator' in the body of the message.