Hi Lars,<div>I'm sorry if my response didn't help you, however, I have been through exactly what you are describing and it is outlined in that link I sent.</div><div>Please check the "update" part of the wiki that quotes what Baszi told me and why I ended up using the recvbuf in syslog-ng. Setting it there made everything work for me.</div>
<div><br></div><div><br></div><div><br></div><div><br clear="all">______________________________________________________________ <br><br>Clayton Dukes<br>______________________________________________________________<br>
<br><br><div class="gmail_quote">On Fri, Oct 15, 2010 at 5:11 PM, Lars Kellogg-Stedman <span dir="ltr"><<a href="mailto:lars@oddbit.com">lars@oddbit.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex;">
<div class="im">> Actually, you did not say it in your message. Because searching it for<br>
> the string 'buf' returns no results.<br>
<br>
</div>Look, I'm not trying to be difficult, but I do at least expect people<br>
to read my email before responding. Here, I'll quote it for you:<br>
<div class="im"><br>
If I raise the rmem settings like this:<br>
<br>
net.core.rmem_default = 512000<br>
net.core.rmem_max = 1024000<br>
<br>
Then it looks like I can support messages rates around 1000 msgs/sec.<br>
If I try with 2000 msgs/sec, the loss rates jumps up again (to around<br>
30%).<br>
<br>
</div>I'm sorry if you got bored before reading it. I was trying to provide<br>
sufficient details that people wouldn't suggest the things I've<br>
already tried.<br>
<br>
Additionally, as far as I can tell, setting net.core.rmem_default is<br>
largely equivalent, from the point of view of syslog-ng, to setting<br>
so_rcvbuf() (since it sets the default receive buffer size). On a<br>
system with lots of open sockets, setting a lower<br>
net.core.rmem_default and using so_rcvbuf() would probably make more<br>
sense.<br>
<div><div></div><div class="h5">______________________________________________________________________________<br>
Member info: <a href="https://lists.balabit.hu/mailman/listinfo/syslog-ng" target="_blank">https://lists.balabit.hu/mailman/listinfo/syslog-ng</a><br>
Documentation: <a href="http://www.balabit.com/support/documentation/?product=syslog-ng" target="_blank">http://www.balabit.com/support/documentation/?product=syslog-ng</a><br>
FAQ: <a href="http://www.campin.net/syslog-ng/faq.html" target="_blank">http://www.campin.net/syslog-ng/faq.html</a><br>
<br>
</div></div></blockquote></div><br></div>