From owner-freebsd-performance@FreeBSD.ORG Wed Dec 7 10:39:32 2005 Return-Path: X-Original-To: freebsd-performance@freebsd.org Delivered-To: freebsd-performance@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 7F5F516A41F for ; Wed, 7 Dec 2005 10:39:32 +0000 (GMT) (envelope-from imriz@co.zahav.net.il) Received: from mrx.wan.inter.net.il (mrx.wan.inter.net.il [192.117.191.51]) by mx1.FreeBSD.org (Postfix) with SMTP id BC46C43D55 for ; Wed, 7 Dec 2005 10:39:28 +0000 (GMT) (envelope-from imriz@co.zahav.net.il) Received: from igfe.InetGold ([172.33.1.137]) by mrx.wan.inter.net.il (SAVSMTP 3.1.0.29) with SMTP id M2005120712404927593 for ; Wed, 07 Dec 2005 12:40:49 +0200 Received: from IGMAIL.InetGold ([172.31.100.164]) by igfe.InetGold with Microsoft SMTPSVC(6.0.3790.1830); Wed, 7 Dec 2005 12:39:26 +0200 X-MimeOLE: Produced By Microsoft Exchange V6.5.7226.0 Content-class: urn:content-classes:message MIME-Version: 1.0 Content-Type: text/plain; charset="windows-1255" Content-Transfer-Encoding: quoted-printable Date: Wed, 7 Dec 2005 12:44:52 +0200 Message-ID: X-MS-Has-Attach: X-MS-TNEF-Correlator: Thread-Topic: very busy syslog server Thread-Index: AcX7Gn5cTwdte5XdQrKFj7UnjCL8uA== From: "Imri Zvik" To: X-OriginalArrivalTime: 07 Dec 2005 10:39:26.0729 (UTC) FILETIME=[7EEFBF90:01C5FB1A] Subject: very busy syslog server X-BeenThere: freebsd-performance@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Performance/tuning List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 07 Dec 2005 10:39:32 -0000 Hi! I'm trying to setup a syslog server to serve a large group of servers. For the syslog daemon, I have chosen rsyslogd, and the backend is mysql = (on a different machine). The machine has 2 Intel Xeon 2.80GHz CPUs, and 1GB of RAM, and it is = running FreeBSD 6 (6.0-STABLE). The problem is, that I see a lot of UDP packets being dropped: udp: 390202 datagrams received 0 with incomplete header 0 with bad data length field 0 with bad checksum 6 with no checksum 0 dropped due to no socket 0 broadcast/multicast datagrams dropped due to no socket ->>> 123677 dropped due to full socket buffers 0 not for hashed pcb 266525 delivered 133260 datagrams output I have tried to increase net.inet.udp.recvspace, but it didn't solve the = problem. I would appreciate any hint or tips. Thank you in advance! -- Imri Zvik PGP (2.6.3ia) Public Key: http://mariska.inter.net.il/~imriz/imriz.pgp =A0