From owner-freebsd-stable@FreeBSD.ORG  Tue Nov  4 00:43:24 2003
Return-Path: <owner-freebsd-stable@FreeBSD.ORG>
Delivered-To: freebsd-stable@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id 3251816A4CE
	for <freebsd-stable@freebsd.org>;
	Tue,  4 Nov 2003 00:43:24 -0800 (PST)
Received: from CITADEL.NOBULUS.COM (citadel.nobulus.com [212.97.207.19])
	by mx1.FreeBSD.org (Postfix) with ESMTP id AC48B43FD7
	for <freebsd-stable@freebsd.org>;
	Tue,  4 Nov 2003 00:43:22 -0800 (PST)	(envelope-from iva@orange.dk)
Received: from CITADEL.NOBULUS.COM (localhost [127.0.0.1])
	by CITADEL.NOBULUS.COM (8.12.10/8.12.10) with ESMTP id hA48hEu5053275
	for <freebsd-stable@freebsd.org>; Tue, 4 Nov 2003 09:43:14 +0100 (CET)
	(envelope-from iva@CITADEL.NOBULUS.COM)
Received: (from iva@localhost)
	by CITADEL.NOBULUS.COM (8.12.10/8.12.10/Submit) id hA48hEgD053274
	for freebsd-stable@freebsd.org; Tue, 4 Nov 2003 09:43:14 +0100 (CET)
	(envelope-from iva)
Date: Tue, 4 Nov 2003 09:43:14 +0100
From: Ilya Varlashkin <ilya@samara.net>
To: freebsd-stable@freebsd.org
Message-ID: <20031104084314.GA53171@CITADEL.NOBULUS.COM>
References: <20031104000519.GA31319@mail.unixjunkie.com>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <20031104000519.GA31319@mail.unixjunkie.com>
User-Agent: Mutt/1.5.4i
X-Scanned-By: CITADEL.NOBULUS.COM
Subject: Re: (long) high traffic syslog server.
X-BeenThere: freebsd-stable@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: Production branch of FreeBSD source code
	<freebsd-stable.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-stable>,
	<mailto:freebsd-stable-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-stable>
List-Post: <mailto:freebsd-stable@freebsd.org>
List-Help: <mailto:freebsd-stable-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-stable>,
	<mailto:freebsd-stable-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Tue, 04 Nov 2003 08:43:24 -0000

On Mon, Nov 03, 2003 at 06:05:33PM -0600, John wrote:
> I though maybe syslogd was the problem, but running nc on the syslog port and
> sending output to /dev/null still shows the buffer problem.

This looks like the system isn't processing interrupts from network card
fast enough. Try running 'systat -vm' and see if '%Intr' is high.

I'm not familiar with particular network card you're using, but try to check
if with some Intel 100Mbps card you get better performance.

If your syslog traffic load is always high, it doesn't matter how large buffers
you make - at some point they will be filled up if system can't cope with
such amount of traffic.

Kind regards,
Ilya Varlashkin