<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=Content-Type content="text/html; charset=us-ascii">
<META content="MSHTML 6.00.2900.3627" name=GENERATOR></HEAD>
<BODY>
<DIV dir=ltr align=left><FONT face=Arial color=#0000ff size=2><SPAN
class=734062015-11122009>> <FONT face="Times New Roman" color=#000000
size=3>The source machines don't show any such packet
loss.</FONT></SPAN></FONT></DIV>
<DIV> </DIV>
<DIV><SPAN class=734062015-11122009><FONT face=Arial color=#0000ff size=2>With
UDP protocol the sender does not know (or care) if the packets
arrived.</FONT></SPAN></DIV>
<DIV><FONT face=Arial color=#0000ff size=2></FONT><BR> </DIV>
<DIV class=OutlookMessageHeader lang=en-us dir=ltr align=left>
<HR tabIndex=-1>
<FONT face=Tahoma size=2><B>From:</B> syslog-ng-bounces@lists.balabit.hu
[mailto:syslog-ng-bounces@lists.balabit.hu] <B>On Behalf Of </B>Paras
Fadte<BR><B>Sent:</B> 11 December 2009 13:03<BR><B>To:</B>
syslog-ng@lists.balabit.hu<BR><B>Subject:</B> [syslog-ng] udp packet receive
errors<BR></FONT><BR></DIV>
<DIV></DIV>Hi,<BR><BR>When logging to a remote syslog server , I see a lot of
udp "packet receive errors" on the remote syslog server . The source machines
don't show any such packet loss. I tried increasing
net.core.wmem_max to 16MB and changed the log_fifo_size value to 2000 from
default 100 on remote syslog server but still I continue to see udp packet
receive errors . What could be the issue here ? The incoming request rate
is inorder of 50k/sec during peak time. What can be done to minimize
these errors? <BR><BR>Syslog-ng version is syslog-ng 1.6.8<BR><BR>Thank
you.<BR><BR>-Paras<BR></BODY></HTML>