[syslog-ng] UDP packet loss with syslog-ng
Balazs Scheidler
bazsi at balabit.hu
Sat Oct 16 07:02:45 CEST 2010
On Fri, 2010-10-15 at 16:07 -0500, Martin Holste wrote:
> Actually, I missed what you were doing with awk because I don't think
> I've ever seen /inet before. Are you on FreeBSD? My experience (and
> cited performance numbers) is all on Linux. My suspicion is that nc
> would take into account more things like SO_RCVBUF, so I'd be
> interested to see if there's any difference between redirecting the
> raw socket and running netcat.
>
> Your template refers to DNS hostnames, so it's certainly possible that
> it's a factor, though I agree that a single hostname with caching
> enabled should really not be a problem.
DNS resolution happens only once when a message is received. Even if you
used it 20 times in your template, DNS resolution only happens once.
--
Bazsi
More information about the syslog-ng
mailing list