[syslog-ng]Lost CR-LF ?

Hypo hypo@rtfm.it
Fri, 10 Jan 2003 21:35:28 +0100


This is a multi-part message in MIME format.

------=_NextPart_000_006B_01C2B8F0.31D91F90
Content-Type: text/plain;
	charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable

Hi all,

I' have a question regarding syslog-ng.

I'm using last development version and I tried to stress test it using a =
message generator ( Kiwi ).

I configured syslog-ng to accept remote messages via both UDP and TCP.

Then I start sending lot messages like 100msg/s burst and 500msg/s =
burst.

In UDP mode I just lost some messages, but I expected that.

In TCP mode there's a strange behaviour.

What happened is that when I use TCP and send a lot ( 100/sec and more ) =
msg a time , syslog-ng will 'forgot' a carriage return between each =
line, and put all them on a single line. I cannot understand why.

This will not happen when i send less messages for second.

Any clue ?


Amodiovalerio Verde

------=_NextPart_000_006B_01C2B8F0.31D91F90
Content-Type: text/html;
	charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META content=3D"text/html; charset=3Diso-8859-1" =
http-equiv=3DContent-Type>
<META content=3D"MSHTML 5.00.2920.0" name=3DGENERATOR>
<STYLE></STYLE>
</HEAD>
<BODY bgColor=3D#ffffff>
<DIV><FONT face=3DArial size=3D2>Hi all,</FONT></DIV>
<DIV>&nbsp;</DIV>
<DIV><FONT face=3DArial size=3D2>I' have&nbsp;a&nbsp;question regarding=20
syslog-ng.</FONT></DIV>
<DIV>&nbsp;</DIV>
<DIV><FONT face=3DArial size=3D2>I'm using last development version and =
I tried to=20
stress test it using a message generator ( Kiwi ).</FONT></DIV>
<DIV>&nbsp;</DIV>
<DIV><FONT face=3DArial size=3D2>I configured syslog-ng to accept remote =
messages=20
via both UDP and TCP.</FONT></DIV>
<DIV>&nbsp;</DIV>
<DIV><FONT face=3DArial size=3D2>Then I start sending lot messages like =
100msg/s=20
burst and 500msg/s burst.</FONT></DIV>
<DIV>&nbsp;</DIV>
<DIV><FONT face=3DArial size=3D2>In UDP mode I just lost some messages, =
but I=20
expected that.</FONT></DIV>
<DIV>&nbsp;</DIV>
<DIV><FONT face=3DArial size=3D2>In TCP mode there's a strange=20
behaviour.</FONT></DIV>
<DIV>&nbsp;</DIV>
<DIV><FONT face=3DArial size=3D2>What happened is that when I use TCP =
and send a lot=20
( 100/sec and more ) msg a time , syslog-ng will 'forgot' a carriage =
return=20
between each line, and put all them on a single line. I cannot =
understand=20
why.</FONT></DIV>
<DIV>&nbsp;</DIV>
<DIV><FONT face=3DArial size=3D2>This will not happen when i send less =
messages for=20
second.</FONT></DIV>
<DIV>&nbsp;</DIV>
<DIV><FONT face=3DArial size=3D2>Any clue ?</FONT></DIV>
<DIV>&nbsp;</DIV>
<DIV>&nbsp;</DIV>
<DIV><FONT face=3DArial size=3D2>Amodiovalerio =
Verde</FONT></DIV></BODY></HTML>

------=_NextPart_000_006B_01C2B8F0.31D91F90--