Samba hogs syslogd and fails

From: Andrea Venturoli <ml_at_netfence.it>
Date: Mon, 16 Sep 2024 15:17:12 UTC 
Hello.

I've got some trouble with Samba (if interested, see [1] for details).

One of the aspect is that, with vfs_full_audit, it seems to log so much 
that syslogd cannot keep up (or at least it's what I think is happening).

Samba opens /var/run/log and start sending *a lot* of data, eventually 
getting errno=55/ENOBUFS/No buffer space available.
The machine isn't exactly "slow" (RAIDZ1 on SSD enterprise), although 
it's also performing other tasks.

Apart from correcting Samba, is there something that can be done on the 
OS side?
Syslogd tweaking? Better buffering? Blocking the socket instead of 
returnin ENOBUFS, etc...?

  bye & Thanks
	av.

[1] https://bugzilla.samba.org/show_bug.cgi?id=15711