<html>
  <head>
    <meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
  </head>
  <body>
    <p>Hello,</p>
    <p>Thanks for replying.</p>
    <p>I really would love to use TCP. But I'm dealing with several
      legacy network/telecomm devices, and most of them doesn't support
      syslog under TCP.</p>
    <p>I really need to deal with UDP. <br>
    </p>
    <p>Just applied reusable sockets to the configuration.</p>
    <p>More configurationĀ  I tried that gave me better results:
      mem-bug-length and disk-buf-size : The data loss reached zero.</p>
    <p>Got one more doubt: While reading a pipe with cat command, is it
      normal to get cat closed while there are messages streams being
      processed?<br>
    </p>
    <p>Thanks,</p>
    <p>Richter<br>
    </p>
    <div class="moz-cite-prefix">Em 09/04/2021 04:08, Fabien Wernli
      escreveu:<br>
    </div>
    <blockquote type="cite"
      cite="mid:20210409070801.GG9906@ccfawe.in2p3.fr">
      <pre class="moz-quote-pre" wrap="">Hi,

On Thu, Apr 08, 2021 at 12:25:44PM -0300, Richter Vitali Guedes wrote:
</pre>
      <blockquote type="cite">
        <pre class="moz-quote-pre" wrap="">How can I fix it? I need to be sure that all data received is forwarded to
their destinations, respecting the filters, and without any information
loss.
</pre>
      </blockquote>
      <pre class="moz-quote-pre" wrap="">
You should really consider using TCP.
We switched our 2000 nodes+ a month ago, and it saves us a lot of
headeaches. It also makes it much easier to monitor, as TCP connections are
all easily traceable and can be plotted to assess the load-balancer's
situation for instance.

If you really want to keep UDP, the advice I could give would be to use
reusable sockets, which has been implemented quite recently.<a href="https://www.linkedin.com/company/icarotech" target="_blank"><span style="font-size:9.5pt;font-family:"Arial",sans-serif;mso-fareast-font-family:
  "Times New Roman";color:#1155CC;mso-fareast-language:PT-BR;mso-no-proof:yes;
  text-decoration:none;text-underline:none"><span style="mso-ignore:vglayout"></span><!--[endif]--></span></a><span style="font-size:
  9.5pt;font-family:"Arial",sans-serif;mso-fareast-font-family:"Times New Roman";
  mso-fareast-language:PT-BR"><o:p></o:p></span></pre>
    </blockquote>
    <div class="moz-signature">
      <table class="MsoNormalTable" style="width:412.5pt;
        mso-cellspacing:1.5pt;border:none;border-top:solid #C8C8C8
        1.0pt;mso-border-top-alt: solid #C8C8C8
        .75pt;mso-yfti-tbllook:1184;mso-padding-alt:7.5pt 7.5pt 7.5pt
        7.5pt" width="0" cellpadding="0" border="1">
        <tbody>
          <tr style="mso-yfti-irow:0;mso-yfti-firstrow:yes">
            <td style="width:315.0pt;border:none;padding:7.5pt 7.5pt
              7.5pt 7.5pt" width="374" valign="top"><br>
            </td>
            <td style="width:112.5pt;border:none;padding:7.5pt 7.5pt
              7.5pt 7.5pt" width="173"> <br>
            </td>
          </tr>
        </tbody>
      </table>
    </div>
  </body>
</html>