I see ，I will do it as your suggestion, Thanks:) -----邮件原件----- 发件人: syslog-ng-bounces@lists.balabit.hu [mailto:syslog-ng-bounces@lists.balabit.hu] 代表 Balazs Scheidler 发送时间: 2007年9月21日 14:13 收件人: Syslog-ng users' and developers' mailing list 主题: Re: [syslog-ng] 答复: there are many udp packet receive errors On Fri, 2007-09-21 at 12:19 +0800, liuruihong wrote:
I have already read the page : http://www.29west.com/docs/THPM/udp-buffer-sizing.html sysctl -w net.core.rmem_max=8388608 use the above command to change the udp buffer size, but I don`t know the appropriate udp buffer size,can anyony tell me how to determing the appropriate udp buffer size?
There are no definite answers for this question, it is a matter of sizing based on your environment. If you already know the message rate, the average message size, then I would size the UDP buffer to have space for about 1-5 seconds worth of messages. -- Bazsi _______________________________________________ syslog-ng maillist - syslog-ng@lists.balabit.hu https://lists.balabit.hu/mailman/listinfo/syslog-ng Frequently asked questions at http://www.campin.net/syslog-ng/faq.html