From mboxrd@z Thu Jan  1 00:00:00 1970
From: Steve Grubb <sgrubb@redhat.com>
Subject: Re: Dispatcher buffer size
Date: Mon, 10 Nov 2008 22:05:36 -0500
Message-ID: <200811102205.38516.sgrubb@redhat.com>
References: <1226351339.19942.171.camel@pc070168.northgrum.com>
Mime-Version: 1.0
Content-Type: text/plain;
  charset="utf-8"
Content-Transfer-Encoding: 7bit
Return-path: <linux-audit-bounces@redhat.com>
In-Reply-To: <1226351339.19942.171.camel@pc070168.northgrum.com>
Content-Disposition: inline
List-Unsubscribe: <https://www.redhat.com/mailman/listinfo/linux-audit>,
	<mailto:linux-audit-request@redhat.com?subject=unsubscribe>
List-Archive: <https://www.redhat.com/archives/linux-audit>
List-Post: <mailto:linux-audit@redhat.com>
List-Help: <mailto:linux-audit-request@redhat.com?subject=help>
List-Subscribe: <https://www.redhat.com/mailman/listinfo/linux-audit>,
	<mailto:linux-audit-request@redhat.com?subject=subscribe>
Sender: linux-audit-bounces@redhat.com
Errors-To: linux-audit-bounces@redhat.com
To: linux-audit@redhat.com, kevin.boyce@ngc.com
List-Id: linux-audit@redhat.com

On Monday 10 November 2008 16:08:59 Kevin Boyce wrote:
> Does anyone know if there is a way to adjust the buffer size between the
> auditd process and the dispatcher?

The buffer size is whatever the kernel gives pipes. The main adjustment you 
have is either the priority setting so that audit gets more runtime or 
adjusting the size of the internal audispd buffer.

-Steve