On 2014-05-13 9:18, BP9906 wrote:
I adjusted my rmem default and max and I still get send/receive
errors. My values are 16777216 and 26214400 (respectively). I think
remoted isnt reading the buffer fast enough to process.

This is what I have for an environment that bursts to maybe 1,000 EPS. I have had to keep bumping it up in 32MB chunks and so far this has been OK for this size environment.

# Increase UDP buffer size to 128MB due to packet loss seen via netstat -s
net.core.rmem_max=134217728
net.core.rmem_default=134217728

Make sure you reboot after your change or maybe just bring the interface up and down.



--

--- You received this message because you are subscribed to the Google Groups "ossec-list" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to ossec-list+unsubscr...@googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

Reply via email to