What version of syslog generates "last message received x times" messages?

invalid entry · 11-17-2009, 02:10 PM

Hello,
I'm operating a lab with a healthy mix of RHEL 4 and 5. I am planning to replace any version of syslog that generates these "last message received x times" messages and buffers reporting with either syslog-ng or rsyslog. My question is does anyone know exactly what version of syslog (sysklog) that begins implementing this behavior that cannot be turned off?

Thanks!

Komakino · 11-18-2009, 07:09 AM

I don't know where it starts, but I do know that rsyslog (a syslogd replacement) allows this to be turned off by passing the -e option.

invalid entry · 11-18-2009, 08:39 AM

Thanks, rsyslog definitely works as a replacement... just would like to know when syslog became "broken" by exhibiting this awful behavior. I know its meant to prevent DoS attacks from filling up your log files, but this should definitely be configurable. No decent audit tool can properly parse syslog messages that are buffered in this manner.