it had to have known that it maillog.debug, without parsing it and that information would have help a lot
-----Original Message----- From: Todd C. Miller [mailto:[email protected]] Sent: Friday, June 10, 2016 3:35 PM To: Peter Fraser <[email protected]> Cc: '[email protected]' <[email protected]> Subject: Re: FW: smtpd and syslog On Fri, 10 Jun 2016 19:20:23 -0000, Peter Fraser wrote: > But what bothered me was the thousands of lines in /var/log/messages > saying > > sendsyslog: dropped 2 messages, error 55 > > when I first noticed I had forgot that I had modified smtd_flags and > had no idea why my log files were filling up. > I had no success trying to find what error 55 was. Look in /usr/include/sys/errno.h #define ENOBUFS 55 /* No buffer space available */ > There was no hint as to what the source of the problem was. > I did not know of any approach to find the cause, other than guessing > that it was smtpd. It used to be that syslog messages were silently dropped when syslogd was out of buffers. These days the kernel at least logs this condition. It would be hard for the kernel to provide more information without trying to parse the log messages that were dropped. - todd

