> The source machines don't show any such packet loss.

With UDP protocol the sender does not know (or care) if the packets arrived.

From: syslog-ng-bounces@lists.balabit.hu [mailto:syslog-ng-bounces@lists.balabit.hu] On Behalf Of Paras Fadte
Sent: 11 December 2009 13:03
To: syslog-ng@lists.balabit.hu
Subject: [syslog-ng] udp packet receive errors

Hi,

When logging to a remote syslog server , I see a lot of udp "packet receive errors" on the remote syslog server . The source machines don't show any such packet loss. I tried increasing net.core.wmem_max to 16MB and changed the log_fifo_size value to 2000 from default 100 on remote syslog server but still I continue to see udp packet receive errors . What could be the issue here ? The incoming request rate is inorder of 50k/sec during peak time. What can be done to minimize these errors?

Syslog-ng version is syslog-ng 1.6.8

Thank you.

-Paras