MonitorWare Knowledge Base

Hi...

I'm running rsyslog on my linux box with dual processor and 3GB Ram.
This server is used as a syslog server. I use both TCP and UDP Protocol, because UDP can't handle all the received message. I don't know whether the problem in rsyslog, or network layer.

Currently there are 4 machine which forward the message to this syslog server using UDP. But there's a lot of package error.
here the information when I use "netstat -us"

Code: Select all

Udp:
    36124369 packets received
    1108023 packets to unknown port received.
    35541088 packet receive errors
    6280566 packets sent


I have no other idea about this, I already change the max value of
net.core.rmem_max = 16613376
net.core.rmem_default = 8388608
but still no luck....

Is there anyway to handle this package loss?


Kindly Regards,
Andre

• Custom written rsyslog.conf?
• Maintenance Contract?
• Installation support?