Audit pipe full

Ameel Kamboh akamboh at nortel.com
Fri Mar 9 20:01:05 UTC 2007


My platform is running RHEL5 (beta) with SNARE running as a dispatcher

I am seeing many of these logs in my /var/log/messages

Mar  9 13:59:02 vette auditd[23098]: dispatch err (pipe full) event lost
Mar  9 13:59:02 vette last message repeated 22 times
Mar  9 13:59:02 vette auditd[23098]: dispatch error reporting limit
reached - ending report notification.

Anyone know what is causing these:

Ameel Kamboh
MCS AS5200 Security and Media Services
Phone: 972.685.4922 (esn 445-4922)
Mobile: 978-590-2280
SIP: akamboh at techtrial.com
email: akamboh at nortel.com



-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://listman.redhat.com/archives/linux-audit/attachments/20070309/bdca6f5e/attachment.htm>


More information about the Linux-audit mailing list