[syslog-ng] Syslog-ng dropped packets.

[Balazs Scheidler]

On Thu, 2006-05-25 at 06:27 -0700, Vaibhav Goel wrote:
> We are using 1.6.5 (soon to upgrade to 1.6.11) in a production
> environment.  Is 1.9.11 production ready?  I recall a message from you
> saying that you are looking to release 2.0.0 within a month.  I will
> install 1.9.11 on my QA server and start testing it once we deploy
> 1.6.11 to prod.  I am actually not using /dev/xconsole... I have 2
> production loghosts and one of them is more heavily used then the other.
> I am seeing dropped packets on that one during peak hours.  That leads
> me to believe that syslog-ng.  Is there a way to increase the incoming
> buffer in another way?

Are you using UDP or TCP transport? You could increase the socket
receive buffer size. /proc/sys/net/core/rmem_default
and /proc/sys/net/core/rmem_max

-- 
Bazsi