[syslog-ng] UDP packet loss with syslog-ng

Balazs Scheidler bazsi at balabit.hu
Sat Oct 16 07:02:45 CEST 2010


On Fri, 2010-10-15 at 16:07 -0500, Martin Holste wrote:
> Actually, I missed what you were doing with awk because I don't think
> I've ever seen /inet before.  Are you on FreeBSD?  My experience (and
> cited performance numbers) is all on Linux.  My suspicion is that nc
> would take into account more things like SO_RCVBUF, so I'd be
> interested to see if there's any difference between redirecting the
> raw socket and running netcat.
> 
> Your template refers to DNS hostnames, so it's certainly possible that
> it's a factor, though I agree that a single hostname with caching
> enabled should really not be a problem.

DNS resolution happens only once when a message is received. Even if you
used it 20 times in your template, DNS resolution only happens once.

-- 
Bazsi




More information about the syslog-ng mailing list