From owner-freebsd-performance@FreeBSD.ORG Wed Dec 7 11:20:11 2005 Return-Path: X-Original-To: freebsd-performance@freebsd.org Delivered-To: freebsd-performance@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id C27DA16A41F for ; Wed, 7 Dec 2005 11:20:11 +0000 (GMT) (envelope-from imriz@co.zahav.net.il) Received: from mrx.wan.inter.net.il (mrx.wan.inter.net.il [192.117.191.51]) by mx1.FreeBSD.org (Postfix) with SMTP id A2BF943D6E for ; Wed, 7 Dec 2005 11:20:10 +0000 (GMT) (envelope-from imriz@co.zahav.net.il) Received: from igfe.InetGold ([172.33.1.137]) by mrx.wan.inter.net.il (SAVSMTP 3.1.0.29) with SMTP id M2005120713212830095 ; Wed, 07 Dec 2005 13:21:28 +0200 Received: from IGMAIL.InetGold ([172.31.100.164]) by igfe.InetGold with Microsoft SMTPSVC(6.0.3790.1830); Wed, 7 Dec 2005 13:20:06 +0200 X-MimeOLE: Produced By Microsoft Exchange V6.5.7226.0 Content-class: urn:content-classes:message MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Date: Wed, 7 Dec 2005 13:25:31 +0200 Message-ID: X-MS-Has-Attach: X-MS-TNEF-Correlator: Thread-Topic: very busy syslog server Thread-Index: AcX7ICurMkS5SrFNRrq0aHwuQ1E8rQAAKQcw From: "Imri Zvik" To: "Claus Guttesen" X-OriginalArrivalTime: 07 Dec 2005 11:20:06.0358 (UTC) FILETIME=[2D119760:01C5FB20] Cc: freebsd-performance@freebsd.org Subject: RE: very busy syslog server X-BeenThere: freebsd-performance@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Performance/tuning List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 07 Dec 2005 11:20:11 -0000 Hi, First, thanks for the reply. Now, I see that you too are missing messages.... I don't know when was the last time you rested the counters, but missing 22911 events is quite a lot :/ Thanks! -- Imri Zvik PGP (2.6.3ia) Public Key: http://mariska.inter.net.il/~imriz/imriz.pgp =20 -----Original Message----- From: Claus Guttesen [mailto:kometen@gmail.com]=20 Sent: Wednesday, December 07, 2005 1:15 PM To: Imri Zvik Cc: freebsd-performance@freebsd.org Subject: Re: very busy syslog server > I'm trying to setup a syslog server to serve a large group of servers. > For the syslog daemon, I have chosen rsyslogd, and the backend is mysql (on a different > machine). Maby you could put the syslog-messages into a file and then import it into mysql? We have 10 webservers sending http-logs to one dual PIII. syslog~#>netstat -s -p udp udp: 167166048 datagrams received 0 with incomplete header 0 with bad data length field 0 with bad checksum 19371 with no checksum 810 dropped due to no socket 18964 broadcast/multicast datagrams dropped due to no socket 22911 dropped due to full socket buffers 0 not for hashed pcb 167123363 delivered 122985843 datagrams output They are kept in flat files. regards Claus