[syslog-ng] udp packet receive errors

[Fegan, Joe]

> The source machines don't show any such packet loss.

With UDP protocol the sender does not know (or care) if the packets arrived.


________________________________
From: syslog-ng-bounces at lists.balabit.hu [mailto:syslog-ng-bounces at lists.balabit.hu] On Behalf Of Paras Fadte
Sent: 11 December 2009 13:03
To: syslog-ng at lists.balabit.hu
Subject: [syslog-ng] udp packet receive errors

Hi,

When logging to a remote syslog server , I see a lot of udp "packet receive errors" on the remote syslog server . The source machines don't show any such packet loss.  I tried increasing  net.core.wmem_max to 16MB and changed the log_fifo_size value to 2000 from default 100 on remote syslog server but still I continue to see udp packet receive errors . What could be the issue here ? The incoming request rate is  inorder of  50k/sec during peak time. What can be done to minimize these errors?

Syslog-ng version is syslog-ng 1.6.8

Thank you.

-Paras
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.balabit.hu/pipermail/syslog-ng/attachments/20091211/205347b5/attachment.htm