Audit pipe full

Fri Mar 9 20:20:45 UTC 2007

Does this mean the dispatcher is now turned of or I just loose those
events.
Currently I am not seeing any events in SNARE and trying to trouble
shoot where the issue is.
Any help will be great.
Thanks. 

Ameel Kamboh
MCS AS5200 Security and Media Services
Phone: 972.685.4922 (esn 445-4922)
Mobile: 978-590-2280
SIP: akamboh at techtrial.com
email: akamboh at nortel.com

-----Original Message-----
From: Steve Grubb [mailto:sgrubb at redhat.com] 
Sent: Friday, March 09, 2007 2:19 PM
To: linux-audit at redhat.com
Cc: Kamboh, Ameel (RICH1:B670)
Subject: Re: Audit pipe full

On Friday 09 March 2007 15:01, Ameel Kamboh wrote:
> Anyone know what is causing these:

That program is not pulling the events from the audit daemon fast
enough.

-Steve