syslog messages truncated

[Denis Vlasenko]

On Monday 07 May 2007 14:23, Hamish Moffatt wrote:
> Hi,
> 
> I've just installed busybox 1.4.2 on an embedded ARM system using uclibc
> 0.9.28.3. (I'll try 1.5.0 next but the web site warns it may not be
> stable yet.)
> 
> syslog messages are being truncated. This happens regardless of their
> source (klogd, logger, other programs), with the exception of syslogd's
> own internal messages. For example:
> 
> hostname# cat /var/log/messages
> Jan  1 00:00:04 hostname syslog.info syslogd started: BusyBox v1.4.2
> Jan  1 00:00:04 hostname user.warn kernel: ixp
> Jan  1 00:00:04 hostname user.debug kernel: ixp
> Jan  1 00:00:04 hostname user.info kernel: ixp
> Jan  1 00:00:04 hostname user.info kernel: ixp
> Jan  1 00:00:05 hostname user.warn kernel: [er
> Jan  1 00:00:05 hostname user.warn kernel: [er
> Jan  1 00:00:06 hostname user.info kernel: ixp
> Jan  1 00:00:06 hostname user.warn kernel: Ini
> Jan  1 00:00:06 hostname user.warn kernel: ixp
> Jan  1 00:00:06 hostname user.warn kernel: ixp
> Jan  1 00:00:07 hostname daemon.info init: Start
> Jan  1 00:00:09 hostname user.warn kernel: ixp
> Jan  1 00:01:58 hostname auth.info login[678]:
> Jan  1 00:20:04 hostname syslog.info -- MARK --
> Jan  1 00:40:04 hostname syslog.info -- MARK --
> Jan  1 01:00:04 hostname syslog.info -- MARK --
> Jan  1 01:20:04 hostname syslog.info -- MARK --
> Jan  1 01:40:04 hostname syslog.info -- MARK --
> Jan  1 02:00:04 hostname syslog.info -- MARK --
> Jan  1 02:20:04 hostname syslog.info -- MARK --
> Jan  1 02:28:21 hostname auth.info login[682]:
> hostname# logger "abcdefghij"
> hostname# tail -2 /var/log/messages
> Jan  1 02:28:21 hostname auth.info login[682]:
> Jan  1 02:28:43 hostname user.notice root: abcde
> 
> I couldn't find any hits for this on Google. Is it a known problem?

Yes, I mistakenly thought that BUFSIZ is big enough and used
BUFSIZ-sized buffer for data in syslogd.

But uclibc can be configured to have very small BUFSIZ.

The bug is fixed in newer busybox. Alternatively, rebuild uclibc with
a bit larger BUFSIZ (like 2k?)
--
vda