On Tuesday 24 May 2016, you wrote:

This is the first report I've received, but the values indicated are suspiciously right over (2M = 2097152), which makes me think a 32bit issue is very possible.

Things got even more interesting. I added fourth format and it contans real MAXCHECK (I increased it to 2048000) value:

•           errprintf("logfetch: %s delta %zu bytes exceeds max buffer size %zu; skipping some data\n", filename, bufsz, MAXCHECK);

•           errprintf("logfetch: %s delta %zu bytes exceeds max buffer size %zu,%zu; skipping some data\n", filename, bufsz, MAXCHECK);

A log string now:

2016-07-04 17:26:21.345027 logfetch: /var/log/mail/all delta 9443833 bytes exceeds max buffer size 0,2048000; skipping some data

-- Regards, Sergey