From mboxrd@z Thu Jan 1 00:00:00 1970 From: Kevin Boyce Subject: Dispatcher buffer size Date: Mon, 10 Nov 2008 16:08:59 -0500 Message-ID: <1226351339.19942.171.camel@pc070168.northgrum.com> Reply-To: kevin.boyce@ngc.com Mime-Version: 1.0 Content-Type: multipart/mixed; boundary="===============0725949804==" Return-path: Received: from mx3.redhat.com (mx3.redhat.com [172.16.48.32]) by int-mx1.corp.redhat.com (8.13.1/8.13.1) with ESMTP id mAAL9CYa020034 for ; Mon, 10 Nov 2008 16:09:12 -0500 Received: from xmrm0101.northgrum.com (xmrm0101.northgrum.com [155.104.240.104]) by mx3.redhat.com (8.13.8/8.13.8) with ESMTP id mAAL91TT024974 for ; Mon, 10 Nov 2008 16:09:01 -0500 List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: linux-audit-bounces@redhat.com Errors-To: linux-audit-bounces@redhat.com To: linux-audit@redhat.com List-Id: linux-audit@redhat.com --===============0725949804== Content-Type: multipart/alternative; boundary="=-bfMRv3od9c8bP13QpBIK" --=-bfMRv3od9c8bP13QpBIK Content-Type: text/plain Content-Transfer-Encoding: 7bit Folks, Does anyone know if there is a way to adjust the buffer size between the auditd process and the dispatcher? Currently, I think it is set to 128KB (according to the man page) for audit-1.0.15 Thanks, Kevin --=-bfMRv3od9c8bP13QpBIK Content-Type: text/html; charset=utf-8 Folks,

Does anyone know if there is a way to adjust the buffer size between the auditd process and the dispatcher?  Currently, I think it is set to 128KB (according to the man page) for audit-1.0.15

Thanks,
Kevin --=-bfMRv3od9c8bP13QpBIK-- --===============0725949804== Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline --===============0725949804==-- From mboxrd@z Thu Jan 1 00:00:00 1970 From: Steve Grubb Subject: Re: Dispatcher buffer size Date: Mon, 10 Nov 2008 22:05:36 -0500 Message-ID: <200811102205.38516.sgrubb@redhat.com> References: <1226351339.19942.171.camel@pc070168.northgrum.com> Mime-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit Return-path: In-Reply-To: <1226351339.19942.171.camel@pc070168.northgrum.com> Content-Disposition: inline List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: linux-audit-bounces@redhat.com Errors-To: linux-audit-bounces@redhat.com To: linux-audit@redhat.com, kevin.boyce@ngc.com List-Id: linux-audit@redhat.com On Monday 10 November 2008 16:08:59 Kevin Boyce wrote: > Does anyone know if there is a way to adjust the buffer size between the > auditd process and the dispatcher? The buffer size is whatever the kernel gives pipes. The main adjustment you have is either the priority setting so that audit gets more runtime or adjusting the size of the internal audispd buffer. -Steve